test

upstream gitlab {
   sticky name=gitlab expires=2h;
   server 192.168.68.20;
}

server {
   listen 80;
   listen [::]:80;
   server_name git.site.com;
   return 301 https://$host$request_uri;
}

server {
   listen 443 ssl http2;
   listen [::]:443 ssl http2;

   server_name git.munso.online;

   ssl_certificate      /etc/letsencrypt/live/git.munso.online/fullchain.pem;
   ssl_certificate_key  /etc/letsencrypt/live/git.munso.online/privkey.pem;
   ssl_trusted_certificate /etc/letsencrypt/live/git.munso.online/fullchain.pem;

   include /etc/nginx/conf.d/ssl.conf;

   include /etc/nginx/conf.d/http-headers.conf;
   # change header values
   location / {
        proxy_cache web;
        proxy_cache_methods GET HEAD;
        proxy_cache_revalidate on;
        proxy_cache_min_uses 3;
        proxy_cache_use_stale error timeout updating http_500 http_502
                              http_503 http_504;
        proxy_cache_background_update on;
        proxy_cache_lock on;
        proxy_cache_valid 15m;

        proxy_pass http://gitlab;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_buffering off;

   }




}