server {
        listen 80;
        listen [::]:80;

        server_tokens off;
        server_name node1.temtum.com;

        return 301 https://$server_name$request_uri;
}

server {
        listen 443 ssl;

        ssl on;
        ssl_certificate /etc/nginx/ssl/certificate.pem;
        ssl_certificate_key /etc/nginx/ssl/private.key;
        ssl_protocols TLSv1.1 TLSv1.2;

        server_tokens off;
        client_max_body_size 10m;

        server_name node1.temtum.com;

        location / {
                proxy_redirect off;
                proxy_set_header Host $host:$server_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Ssl on;
                proxy_pass http://127.0.0.1:3001;
        }

        location ~ /ws/? {
                proxy_pass http://127.0.0.1:6001;
                proxy_set_header Host $host:$server_port;
                proxy_http_version 1.1;

                proxy_buffers 8 32k;
                proxy_buffer_size 64k;

                proxy_read_timeout 10800s;

                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
}