server {
      listen 3003 default_server;
      listen [::]:3003 default_server;

      access_log /dev/stdout;
      error_log /dev/stdout;

      ssl_protocols TLSv1.1 TLSv1.2;
      ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
      ssl_prefer_server_ciphers off;
      ssl_session_timeout 1d;
      ssl_session_tickets off;

      # OCSP stapling
      ssl_stapling on;
      ssl_stapling_verify on;

      server_tokens off;

      proxy_headers_hash_bucket_size 1280;

      location / {
        try_files $uri /index.html =404;
        root /home/user/app/packages/app/dist/;
        index index.html;
        add_header Last-Modified $date_gmt;
        add_header Cache-Control 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
        if_modified_since off;
        expires off;
        etag off;
      }

      location /api/ {
        proxy_http_version  1.1;
        proxy_pass https://orchestration-app.sample.com;
        proxy_cache_bypass  $http_upgrade;
        proxy_set_header Upgrade           $http_upgrade;
        proxy_set_header Connection        "Upgrade";
      }

      location /api/legalEntities {
        proxy_http_version  1.1;
        proxy_pass https://orchestration-app.sample.com;
      }

      location /api/prefilledDatasets {
        proxy_http_version  1.1;
        proxy_pass https://pref.sample.com;
      }

      location /api/prefilledAddresses {
        proxy_http_version  1.1;
        proxy_headers_hash_bucket_size 128;
        proxy_pass https://pref.sample.com;
      }

      location /refimpl-be/api/user/entities {
        proxy_headers_hash_bucket_size 128;
        proxy_pass https://core.sample.com;
      }

      location /api/legalentities {
        proxy_http_version  1.1;
        proxy_headers_hash_bucket_size 128;
        proxy_pass https://user-mgmt.sample.com;
      }

      location /api/users/userinfo {
        proxy_http_version  1.1;
        proxy_pass https://user-mgmt.sample.com;
      }

      location ~ ^/(refimpl-be|dataset|prefill)/ {
        proxy_http_version  1.1;
        proxy_pass https://core.sample.com;
        proxy_cache_bypass  $http_upgrade;
        proxy_set_header Upgrade           $http_upgrade;
        proxy_set_header Connection        "Upgrade";
      }
    }


2020/01/11 11:17:39 [debug] 41706#0: *21 http upstream request: "/api/legalEntities/a74bc1-a0fe-4f83-6182f09803f6/drafts/a4a6cb89-30ca-48ed-9f48/signing?"
2020/01/11 11:17:39 [debug] 41706#0: *21 http upstream process header
2020/01/11 11:17:39 [debug] 41706#0: *21 SSL_read: 1021
2020/01/11 11:17:39 [debug] 41706#0: *21 SSL_read: -1
2020/01/11 11:17:39 [debug] 41706#0: *21 SSL_get_error: 2
2020/01/11 11:17:39 [debug] 41706#0: *21 http proxy status 400 "400 Bad Request"
2020/01/11 11:17:39 [debug] 41706#0: *21 http proxy header: "content-type: text/html;charset=utf-8"
2020/01/11 11:17:39 [debug] 41706#0: *21 http proxy header: "content-language: en"
2020/01/11 11:17:39 [debug] 41706#0: *21 http proxy header: "content-length: 800"
2020/01/11 11:17:39 [debug] 41706#0: *21 http proxy header: "date: Sat, 11 Jan 2020 11:17:39 GMT"