webapp.conf

server {
    listen         80;
    server_name    $hostname;
    return         301 https://$host$request_uri;
}

server {
    listen 443;
    server_name $hostname;
    root /home/app/webapp/public;

		if (-f $document_root/single_cell/maintenance.html) {
			return 503;
		}

		error_page 503 @maintenance;

		location @maintenance {
			rewrite ^(.*)$ /single_cell/maintenance.html break;
		}

		proxy_set_header    X-Real-IP         $remote_addr;
		proxy_set_header    X-Forwarded-For   $proxy_add_x_forwarded_for;
		proxy_set_header    X-Forwarded-Proto https;
		proxy_set_header    X-Frame-Options   'SAMEORIGIN';
		proxy_set_header    Strict-Transport-Security   "max-age=31536000";

		# The following deploys your Ruby/Python/Node.js/Meteor app on Passenger.

		# Not familiar with Passenger, and used (G)Unicorn/Thin/Puma/pure Node before?
		# Yes, this is all you need to deploy on Passenger! All the reverse proxying,
		# socket setup, process management, etc are all taken care automatically for
		# you! Learn more at https://www.phusionpassenger.com/.
		passenger_enabled on;
		passenger_user app;

		sendfile    on;
		client_max_body_size	1024M;

		proxy_read_timeout	300;

		# If this is a Ruby app, specify a Ruby version:
		passenger_ruby	/usr/bin/ruby;
		# For Ruby 2.0
		# passenger_ruby /usr/bin/ruby2.0;
		# For Ruby 1.9.3 (you can ignore the "1.9.1" suffix)
		#passenger_ruby /usr/bin/ruby1.9.1;

		ssl    on;
		ssl_certificate /etc/pki/tls/certs/localhost.crt;
		ssl_certificate_key /etc/pki/tls/private/localhost.key;

		ssl_protocols TLSv1.2;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-ES256-SHA:!3DES:!ADH:!DES:!DH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!EXPORT:!KRB5-DES-CBC3-SHA:!MD5:!PSK:!RC4:!aECDH:!aNULL:!eNULL;
		ssl_prefer_server_ciphers on;
}