nginx.config

files:
  "/etc/nginx/nginx.conf":
    mode: "000755"
    owner: root
    group: root
    content: |
        user  nginx;
        worker_processes  auto;
        error_log  /var/log/nginx/error.log;
        pid        /var/run/nginx.pid;
        worker_rlimit_nofile    32153;

        events {
            worker_connections  1024;
        }

        http {
            include       /etc/nginx/mime.types;
            default_type  application/octet-stream;

            access_log    /var/log/nginx/access.log;


            log_format  main  '$http_x_forwarded_for - $remote_user [$time_local] "$request" '
                                  '$status $body_bytes_sent "$http_referer" '
                                  '"$http_user_agent" "$request_time"';

            include  conf.d/*.conf;

            map $http_upgrade $connection_upgrade {
                    default       "upgrade";
            }

            server {
                listen 80;
                gzip on;
                gzip_comp_level 4;
                gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

                access_log    /var/log/nginx/access.log main;

                location / {
                    proxy_pass            http://docker;
                    proxy_http_version    1.1;

                    proxy_set_header    Connection             $connection_upgrade;
                    proxy_set_header    Upgrade                $http_upgrade;
                    proxy_set_header    Host                   $host;
                    proxy_set_header    X-Real-IP              $remote_addr;
                    proxy_set_header    X-Forwarded-For        $proxy_add_x_forwarded_for;
                }

                # Include the Elastic Beanstalk generated locations
                include conf.d/elasticbeanstalk/*.conf;

                location /server-status {
                    stub_status on;
                    access_log off;
                    allow 127.0.0.1;
                    deny all;
                }
            }
        }