jenkins nginx root config

upstream project {
        server 127.0.0.1:8088;
}

# Retain the default nginx handling of requests without a "Connection" header
map $http_upgrade $connection_upgrade {
    default          upgrade;
    ''               close;
}

# trust http_x_forwarded_proto headers correctly indicate ssl offloading
map $http_x_forwarded_proto $pass_access_scheme {
    default          $http_x_forwarded_proto;
    ''               $scheme;
}

map $http_x_forwarded_port $pass_server_port {
    default           $http_x_forwarded_port;
    ''                $server_port;
}

map $http_x_forwarded_for $the_real_ip {
    default          $http_x_forwarded_for;
    ''               $remote_addr;
}

# map port 8080 to 443 for header X-Forwarded-Port
map $pass_server_port $pass_port {
    8080             443;
    default          $pass_server_port;
}

# Map a response error watching the header Content-Type
map $http_accept $httpAccept {
    default          html;
    application/json json;
    application/xml  xml;
    text/plain       text;
    text/css         css;
    text/javascript  js;
}

map $httpAccept $httpReturnType {
    default          html;
    json             application/json;
    xml              application/xml;
    text             text/plain;
    css              text/css;
    js               text/javascript;
}

# Obtain best http host
map $http_host $this_host {
    default          $http_host;
    ''               $host;
}

map $http_x_forwarded_host $best_http_host {
    default          $http_x_forwarded_host;
    ''               $this_host;
}

server {
        server_name dev.<site>.ru;

        client_max_body_size   100m;
        proxy_read_timeout     3600s;
        proxy_connect_timeout  3600s;

        gzip on;
        gzip_disable "msie6";

        gzip_comp_level 2;
        gzip_proxied any;
        gzip_types
                text/plain
                text/css
                text/js
                text/javascript
                application/javascript
                application/x-javascript
                application/json
                application/xml
                image/svg+xml
                font/ttf
                application/vnd.ms-fontobject
                application/x-font-ttf
                application/font-woff
                application/font-woff2
                font/opentype;

        server_tokens off;

        location ^~ /jenkins {
                port_in_redirect off;

                client_max_body_size                    "1m";
                proxy_set_header Host                   $host:$pass_server_port;

                # Pass Real IP
                proxy_set_header X-Real-IP              $remote_addr;

                # Allow websocket connections
                proxy_set_header                        Upgrade           $http_upgrade;
                proxy_set_header                        Connection        $connection_upgrade;

                proxy_set_header X-Forwarded-For        $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host       $host;
                proxy_set_header X-Forwarded-Port       $pass_port;
                proxy_set_header X-Forwarded-Proto      $pass_access_scheme;
                proxy_set_header X-Forwarded-Proto      $scheme;

                # Custom headers

                proxy_connect_timeout                   3600s;
                proxy_send_timeout                      3600s;
                proxy_read_timeout                      3600s;

                proxy_redirect                          http://127.0.0.1:8080 https://dev.<site>.ru;
                proxy_buffering                         off;
                proxy_buffer_size                       "4k";

                proxy_http_version                      1.1;

                proxy_pass http://127.0.0.1:8080/jenkins;
        }

        location / {
                client_max_body_size                    "1m";
                proxy_set_header Host                   $host:$pass_server_port;

                # Pass Real IP
                proxy_set_header X-Real-IP              $remote_addr;

                # Allow websocket connections
                proxy_set_header                        Upgrade           $http_upgrade;
                proxy_set_header                        Connection        $connection_upgrade;

                proxy_set_header X-Forwarded-For        $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host       $host;
                proxy_set_header X-Forwarded-Port       $pass_port;
                proxy_set_header X-Forwarded-Proto      $pass_access_scheme;
                proxy_set_header X-Forwarded-Proto      $scheme;

                # Custom headers

                proxy_connect_timeout                   3600s;
                proxy_send_timeout                      3600s;
                proxy_read_timeout                      3600s;

                proxy_redirect                          http://127.0.0.1:8088 https://dev.<site>.ru;
                proxy_buffering                         off;
                proxy_buffer_size                       "4k";

                proxy_http_version                      1.1;

                proxy_redirect                       off;
                proxy_pass                           http://project;
        }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/dev.<site>.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/dev.<site>.ru/privkey.pem; # managed by Certbot
}

server {
    if ($host = dev.<site>.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen 80;
    server_name dev.<site>.ru;

    return 404; # managed by Certbot
}

server {
    listen 80;

    server_name <real-ip>;

    #return 301 https://$host$request_uri;
    return 301 https://dev.<site>.ru$request_uri;
}