SSSL-DNS/nginx/nginx.example.conf

worker_processes 1;

events {
	worker_connections 1024;
}

http {
	include mime.types;
	default_type application/octet-stream;

	sendfile on;
	keepalive_timeout 65;

	error_log /dev/stderr;
	error_log /var/log/nginx/error.log;
	access_log /dev/stdout;
	access_log /var/log/nginx/access.log;

	server {
		listen 80;

		server_name conntest.nintendowifi.net;

		location / {
			proxy_pass http://127.0.0.1;
			proxy_http_version 1.1;
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Fowarded-Proto $scheme;
			proxy_cache_bypass $http_upgrade;
		}
	}

	server {
		listen 80;
		listen 443 ssl;

		server_name account.nintendo.net;

		location / {
			proxy_pass http://127.0.0.1;
			proxy_http_version 1.1;
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Fowarded-Proto $scheme;
			proxy_cache_bypass $http_upgrade;
		}

		ssl_protocols TLSv1 TLSv1.1;
		ssl_ciphers ALL;
		ssl_prefer_server_ciphers on;
		ssl_certificate /opt/nginx/ssl/ca.pem;
		ssl_certificate_key /opt/nginx/ssl/private.key;
	}
}