nginx.conf.tmpl

upstream private {
    server                  127.0.0.1:18001 fail_timeout=0;
}

upstream public {
    server                  127.0.0.1:11008 fail_timeout=0;
}

upstream websocket {
    server                  127.0.0.1:8888;
}

# Administration page
server {
    listen                  8001;
    server_name             _;
    server_tokens           off;

    # Allow localhost (RFC990) and private networks (RFC1918)
    allow                   127.0.0.0/8;
    allow                   10.0.0.0/8;
    allow                   172.16.0.0/12;
    allow                   192.168.0.0/16;
    deny                    all;

    location /static {
        alias               /home/bitnodes/hardware/public;
        expires             1w;
    }

    location /ws/ {
        proxy_http_version  1.1;
        proxy_pass          http://websocket/;
        proxy_set_header    Connection "upgrade";
        proxy_set_header    Upgrade $http_upgrade;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location / {
        proxy_pass          http://private;
        proxy_set_header    Host $http_host;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect      off;
    }
}

# Public status page
server {
    listen                  1008 default_server;
    server_name             _;
    server_tokens           off;

    location /static {
        alias               /home/bitnodes/hardware/public;
        expires             1w;
    }

    location /ws/ {
        proxy_http_version  1.1;
        proxy_pass          http://websocket/;
        proxy_set_header    Connection "upgrade";
        proxy_set_header    Upgrade $http_upgrade;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location / {
        proxy_pass          http://public;
        proxy_set_header    Host $http_host;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect      off;
    }
}