Nginx CI

http {
    include /etc/nginx/mime.types;

    # CI

    upstream jenkins {
        keepalive 32;
        server 127.0.0.1:8080;
    }

    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
    }

    server {
        listen 80;
        server_name www.ci.azat.io ci.azat.io;
        access_log      /var/log/ci.azat.io.access.log;
        error_log       /var/log/ci.azat.io.error.log;
        return 301 https://ci.azat.io$request_uri;
    }

    server {
        listen 443 ssl http2;
        server_name www.ci.azat.io;
        return 301 $scheme://ci.azat.io$request_uri;
    }

    server {
        listen 443 ssl http2 default_server;
        listen [::]:443 ssl http2 default_server;
        server_name ci.azat.io;
        access_log      /var/log/ci.azat.io.access.log;
        error_log       /var/log/ci.azat.io.error.log;
        location / {
            # proxy_pass http://localhost:8080;
            proxy_pass http://jenkins;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto https;
            proxy_set_header X-Forwarded-Port 443;
            proxy_set_header Authorization "";
        }
        ssl_certificate /etc/letsencrypt/live/ci.azat.io/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/ci.azat.io/privkey.pem;
        include /etc/letsencrypt/options-ssl-nginx.conf;
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    }
}