upstream webapp { least_conn; server 127.0.0.1:3600; server 127.0.0.1:3601; } server { server_name webapp.digitaltelepresence.com location /assets { root /home/dtp/live/dtp-webapp; } location / { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $host; proxy_pass http://webapp; proxy_max_temp_file_size 0; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } listen 443 ssl; listen [::]:443 ssl ipv6only=on; ssl_certificate /home/dtp/keys/cloudflare-origin.pem ssl_certificate_key /home/dtp/keys/cloudflare-origin.key } server { server_name webapp.digitaltelepresence.com; if ($host = webapp.digitaltelepresence.com) { return 301 https://$host$request_uri; } listen 80; listen [::]:80; return 404; }