server {
  listen 80;
  server_name <domain_name> www.<domain_name>;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl http2;
  server_name <domain_name> www.<domain_name>;

  ssl_certificate_key /var/lib/acme/private/<domain_name>.key;
  ssl_certificate /var/lib/acme/certs/<domain_name>.crt;

  #separated logs for each domain
  access_log /var/log/nginx/<domain_name>_access.log;

  #some bots protection
  if ($http_user_agent ~* ^Wordpress) {
     return 444;
  }

  location @backend {
    proxy_http_version 1.1;
    proxy_request_buffering off;
    proxy_set_header   Host             $host:$server_port;
    proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;
    proxy_hide_header X-Powered-By;
    proxy_pass http://127.0.0.1:<apache_port>;
  }

  location ^~ /ws/ {
    proxy_pass http://127.0.0.1:<ws_port>/;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }

  location / {
    try_files @backend @backend;
  }

  location ~* ^.+\.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js|mp3|flv|mpeg|avi)$ {
    try_files $uri @backend;
  }
}