nginx.conf

worker_processes 1;
events { worker_connections 1024; }

http {
  sendfile on;
  upstream shinystudio {
    server shinystudio:8080;
  }

  # TO ENABLE SSL, UNCOMMENT BELOW (1/3)
  server {
    listen                80;
    server_name           example.com; # CHANGE ME
    server_tokens off;

    location / {
      return 301 https://$host:443$request_uri; # SET TO DESIRED SSL PORT (1/3)
    }

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }
  }

  server {
    listen                443 ssl; # SET TO DESIRED SSL PORT (2/3)
    server_name           example.com; # CHANGE ME
    access_log            /var/log/nginx/shinyproxy.access.log;
    error_log             /var/log/nginx/shinyproxy.error.log error;

    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    error_page  497 https://$host:443$request_uri; # SET TO DESIRED SSL PORT (3/3)

    location / {
      proxy_pass          http://shinystudio;

      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_read_timeout 600s;
      proxy_buffering  off;

      proxy_redirect     off;
      proxy_set_header   Host $http_host;
      proxy_set_header   X-Real-IP $remote_addr;
      proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header   X-Forwarded-Host $host;
    }
  }
}