machine_setup/ansible/roles/jail_bastion/files/nginx.conf

worker_processes  auto;
user  www www;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    types {
        text/plain log;
    }

    sendfile        on;
    tcp_nopush     on;
    tcp_nodelay    on;
    gzip  on;

    include conf.d/headers.include;

    upstream inner {
        server 10.215.2.2:8081;
        keepalive 4;
    }

    server {
        listen 443 quic reuseport;
        listen [::]:443 quic reuseport;
        listen 443 ssl;
        listen [::]:443 ssl;
        http2  on;

        server_name stuff.fizz.buzz;

        include conf.d/tls_settings.include;
        # RSA
        ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
        ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;

        # Nginx by default only allows file uploads up to 1M in size
        client_max_body_size 50M;

        location / {
            auth_basic           "Stuff";
            auth_basic_user_file conf.d/htpasswd;


            proxy_pass http://inner;
            include conf.d/proxy.include;
        }
    }
}