zer0bin/example.nginx

# replace example.tld with your domain
# replace /location/to with the location

server {
    #listen 80 is default
    server_name www.example.tld;
    return 301 $scheme://example.tld$request_uri;
}

server {
    add_header Access-Control-Allow-Origin *;
    listen 80;
    server_name example.tld www.example.tld;
    root /location/to/zer0bin/frontend/dist;
    index index.html;
    location ^~ /.well-known/ {
        alias /var/www/.well-known/;
	}
	location /api/ {
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Origin' '*';
        proxy_pass http://localhost:8000/;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
    }
}

server {
    add_header Access-Control-Allow-Origin *;
    listen 443 ssl;
    server_name example.tld www.example.tld;
    root /location/to/zer0bin/frontend/dist;
    index index.html;
    location ^~ /.well-known/ {
        alias /var/www/.well-known/;
	}
	location /api/ {
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Origin' '*';
        proxy_pass http://localhost:8000/;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $host;
    }
    #ssl_certificate           /etc/letsencrypt/live/example.tld/fullchain.pem;
    #ssl_certificate_key       /etc/letsencrypt/live/example.tld/privkey.pem;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_prefer_server_ciphers on;
}