/usr/local/nginx/conf$ cat http.redmine.conf


upstream redmine_ashlynn {
  server redmine:8002;
}


server {
  listen        80;
  server_name   rm.nemam.cz;

  access_log  /var/log/nginx/access.redmine.log;
  error_log /var/log/nginx/error.redmine.log;

    # Send sensitive stuff via https
    rewrite ^/login(.*) https://$server_name$request_uri? permanent;
    rewrite ^/my/account(.*) https://$server_name$request_uri? permanent;
    rewrite ^/my/password(.*) https://$server_name$request_uri? permanent;
    rewrite ^/admin(.*) https://$server_name$request_uri? permanent;

  location / {
    proxy_pass http://redmine_ashlynn;
  }
}


server {
  listen        443;
  server_name   rm.nemam.cz;

  ssl on;

  ssl_certificate /usr/local/nginx/conf/.ssl/rm.nemam.crt;
  ssl_certificate_key /usr/local/nginx/conf/.ssl/rm.nemam.key;

  access_log  /var/log/nginx/access.redmine-ssl.log;
  error_log /var/log/nginx/error.redmine-ssl.log;

    # When we're back to non-sensitive things, send back to http
    rewrite ^/$ http://$server_name$request_uri permanent;

    # This should exclude those (tested here: http://www.regextester.com/ )
    if ($uri !~* "^/projects/.*(copy|destroy|archive)") {
        rewrite ^/projects(.*) http://$server_name$request_uri permanent;
    }

    rewrite ^/guide(.*) http://$server_name$request_uri permanent;
    rewrite ^/users(.*) http://$server_name$request_uri permanent;
    rewrite ^/my/page(.*) http://$server_name$request_uri permanent;
    rewrite ^/logout(.*) http://$server_name$request_uri permanent;


  location / {
    proxy_pass http://redmine_ashlynn;
  }
}