upstream ya_proxy_sock {
    server unix:///tmp/ya_app.sock;
}

upstream proxy_sock {
    server unix:///tmp/app.sock;
}

server {
    server_name abc.ru;
    listen      443;
    ssl on;
    ssl_certificate /etc/ssl/certs/cert.chained.crt;
    ssl_certificate_key /etc/ssl/private/cert.key;
    add_header Strict-Transport-Security max-age=15768000;
    charset     utf-8;

    client_max_body_size 75M;   # adjust to taste

    location /media {
        proxy_pass  ya_proxy_sock;
    }

    location / {
        proxy_pass  proxy_sock;
    }
}