nginx.conf

worker_processes auto;

user www-data;
pid /var/run/nginx.pid;
daemon off;

events {
    worker_connections 1024;
}

http {

    upstream cloud9 {
        ip_hash;
        server 127.0.0.1:8081;
    }

    upstream meteor {
        ip_hash;
        server 127.0.0.1:3000;
    }

    include mime.types;
    default_type application/octet-stream;
    access_log /var/log/nginx/access.log combined;
    error_log /var/log/nginx/error.log;
    sendfile on;
    gzip on;
    gzip_disable "msie6";
    proxy_read_timeout 1200;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
    }
    
    server {
        listen 443 default_server ssl;
        server_name _;
        
        client_max_body_size 4G;
        keepalive_timeout 5;

        ssl on;
        ssl_certificate /etc/nginx/certs/server.crt;
        ssl_certificate_key /etc/nginx/certs/server.key;
        
        #"ssl_stapling" ignored, issuer certificate not found
        #ssl_stapling on;
        
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 5m;
    
        root /dev/null;

        location / {
            proxy_redirect off;
            auth_basic "Restricted";
            auth_basic_user_file /etc/nginx/.passwd;

            proxy_pass http://cloud9;

            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
            
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Host $http_host;
            proxy_set_header X-NginX-Proxy true;
            if ($uri != '/') {
                expires 30d;
            }            
        }
        
    } #end server

    server {
        listen 8080 ssl;
        server_name _;
        
        client_max_body_size 4G;
        keepalive_timeout 5;

        ssl on;
        ssl_certificate /etc/nginx/certs/server.crt;
        ssl_certificate_key /etc/nginx/certs/server.key;
        
        root /dev/null;
        
        location / {
            proxy_redirect off;
            auth_basic "Restricted";
            auth_basic_user_file /etc/nginx/.passwd;

            proxy_pass http://meteor;

            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            #proxy_set_header Connection $connection_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header Host $http_host;
            
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto http;
            proxy_set_header X-Nginx-Proxy true;
        }

        include /etc/nginx/virtual/*.conf;
    
    } #end server meteor
    
}