nginx.conf

server {
    listen      80;
    server_name dis.int.janelia.org;
    location / {
      return      301 https://dis.int.janelia.org$request_uri;
    }
}

server {
    listen   443 ssl;
    server_name dis.int.janelia.org;

    ssl_certificate      /etc/nginx/ssl/int.janelia.org.full.crt;
    ssl_certificate_key  /etc/nginx/ssl/int.janelia.org.key;

    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  5m;

    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers   on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    client_body_buffer_size 10m;
    client_max_body_size 4G;

    proxy_send_timeout          300s;
    proxy_read_timeout          300s;
    send_timeout                300s;

    gzip on;
    gzip_disable "msie6";

    gzip_comp_level 6;
    gzip_min_length 1100;
    gzip_buffers 16 8k;
    gzip_proxied any;
    gzip_types
        text/plain
        text/css
        text/js
        text/xml
        text/javascript
        application/javascript
        application/x-javascript
        application/json
        application/xml
        application/rss+xml
        image/svg+xml;

    location /static/ {
        alias /api/static/;
    }

    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_redirect off;
        if (!-f $request_filename) {
            proxy_pass      http://app:8000;
            break;
        }
    }

}