Automate nginx reverse proxy automatic install

[bcornec]

On the API-DB server, it could be relevant to automatically setup a reverse proxy with nginx, in order to provide an https redirection to the http services.

[bcornec]

A sample conf file could be:

server {                                                                                                                                                                          
        root /var/www/html;                                                                                                                                                       
        index index.html;                                                                                                                       
                                                                                                                                                                                  
        server_name ec2-x.y.z.t.compute-1.amazonaws.com;                                                                                                                    
                                                                                                                                                                                  
        location / {                                                                                                                                                              
                # First attempt to serve request as file, then                                                                                                                    
                # as directory, then fall back to displaying a 404.                                                                                                               
                proxy_pass http://localhost:8921; #whatever port your app runs on                                                                                                 
                proxy_http_version 1.1;                                                                                                                                           
                proxy_set_header Upgrade $http_upgrade;                                                                                                                           
                proxy_set_header Connection 'upgrade';                                                                                                                            
                proxy_set_header Host $host;                                                                                                                                      
                proxy_cache_bypass $http_upgrade;                                                                                                                                 
        }                       
    listen 8443 ssl; # managed by Certbot                                                                                                                                         
    ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt; # managed by Certbot                                                                                                     
    ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key; # managed by Certbot

server {                                                                                                                                                                          
        listen 80 default_server;                                                                                                                                                 
        listen [::]:80 default_server;                                                                                                                         
        server_name ec2-x.y.z.t.compute-1.amazonaws.com;                                                                                                                    
        return 404;                                                                                                       
}  

[bcornec]

Creating branch revproxy for this on wod-install and wod-api-db

[bcornec]

https://github.com/Workshops-on-Demand/wod-install/tree/revproxy
https://github.com/Workshops-on-Demand/wod-api-db/tree/revproxy