Working with Mayan Nginx

If you wanto install Mayan behind web proxy, you can modify default nginx.

# /etc/nginx/sites-enabled/mayan
server {
    listen 0.0.0.0:80;
    location / {

         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_pass_header Set-Cookie;

         proxy_pass http://127.0.0.1:8000/;
         proxy_redirect off;
    }
}

On primary web proxy you can configured like this.

server {
                return 301 https://$server_name$request_uri;
}
server {
        listen 443;
        server_name mayan.domain.id;
        ssl on;
        ssl_certificate /etc/letsencrypt/live/mayan.domain.id/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/mayan.domain.id/privkey.pem;
        ssl_session_timeout 1d;
        ssl_protocols TLSv1.2;
        add_header Strict-Transport-Security max-age=15768000;
        location / {
                client_max_body_size 512M;
                fastcgi_buffers 8 4K;                     # Please see note 1
                fastcgi_ignore_headers X-Accel-Buffering; # Please see note 2
                gzip off;
                proxy_pass         http://192.168.1.253;
                #proxy_ssl_verify   off;
                proxy_pass_header  Set-Cookie;
                proxy_redirect     off;
                proxy_set_header   Host $http_host;
                proxy_set_header   X-Real-IP $remote_addr;
                proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
                auth_basic "Restricted";
                auth_basic_user_file /etc/nginx/.htpasswd;
                fastcgi_request_buffering off;
        }
}