Categories
Nginx

mero.live Nginx

# 1. Define the Go App Backend with "NO WAIT" settings
upstream go_app {
    # fail_timeout=0 tells Nginx to try again IMMEDIATELY after a failure
    server 127.0.0.1:8080 max_fails=0 fail_timeout=0;
}

server {
    listen 80;
    listen [::]:80;
    server_name mero.live www.mero.live;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
listen [::]:443 ssl;
http2 on;
    server_name mero.live www.mero.live;

    ssl_certificate /etc/letsencrypt/live/mero.live/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/mero.live/privkey.pem;

    # The Go App Proxy
    location / {
        proxy_pass http://localhost:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }

    # Video Streaming folder - DIRECT SERVE FOR SPEED
    location /videos/ {
        alias /home/mero/instax-app/static/videos/;
        add_header Cache-Control "public, max-age=31536000, immutable";
        add_header Access-Control-Allow-Origin *;
        
        # Critical for iPhone/Safari playability
        mp4;
        mp4_buffer_size 1m;
        mp4_max_buffer_size 5m;
    }
}

talk

server {
    server_name talk.mero.live;

    location / {
        proxy_pass http://localhost:8081;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/talk.mero.live/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/talk.mero.live/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = talk.mero.live) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80;
    server_name talk.mero.live;
    return 404; # managed by Certbot


}