server {
server_name grpc.netmaker.DOMAIN.com;
listen 443 ssl http2 ;
access_log /var/log/nginx/access.log vhost;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_certificate /etc/nginx/certs/grpc.netmaker.DOMAIN.com.crt;
ssl_certificate_key /etc/nginx/certs/grpc.netmaker.DOMAIN.com.key;
ssl_dhparam /etc/nginx/certs/grpc.netmaker.DOMAIN.com.dhparam.pem;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/nginx/certs/grpc.netmaker.DOMAIN.com.chain.pem;
add_header Strict-Transport-Security "max-age=31536000" always;
proxy_set_header Host api.netmaker.DOMAIN.com;
proxy_pass_request_headers on;
location / {
grpc_pass grpc://127.0.0.1:50051;
}
}