nginx.conf

user root;
worker_processes 1;

error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;

events
{
  worker_connections 1024;
}

http
{
  include /etc/nginx/mime.types;

  proxy_cache_path /data/nginx/cache levels=1:2 keys_zone=STATIC:30m inactive=24h max_size=200m use_temp_path=off;

  proxy_pass_request_headers on;
  ##proxy_redirect off;
  proxy_set_header Connection keep-alive;

  gzip on;
  gzip_proxied any;

  add_header X-Host $hostname;
  add_header X-Cache-Status $upstream_cache_status;

  map $sent_http_content_type $expires
  {
    default off;
    text/css 1M;
    application/javascript 1M;
    application/x-font-woff 3M;
    ~image/ 6M;
  }

  server
  {
    listen 80;
    server_name localhost;
    server_name 127.0.0.1;
    proxy_set_header Authorization "Basic {{ PASS_BASE64 }}";
    proxy_ssl_certificate     /etc/nginx/ssl/client.pem;
    proxy_ssl_certificate_key /etc/nginx/ssl/client.key;
    
    location /
    {
      proxy_pass  https://{{ BASE_URL }}/;
    }
  }
}