chore(ci): add nginx configuration files

Author: jomunker

nginx/conf.d/upstream.conf

@@ -0,0 +1,9 @@
+# Strapi server
+upstream strapi {
+	server 127.0.0.1:1337;
+}
+
+# NextJS server
+upstream nextjs {
+	server 127.0.0.1:3000;
+}

nginx/sites-available/preview.vim.org

@@ -0,0 +1,73 @@
+server {
+    listen 80 default_server;
+    server_name preview.vim.org
+
+    listen 443 ssl http2;
+
+    #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    location /.well-known {
+      root /var/www/;
+      allow all;
+      try_files $uri =404;
+    }
+
+    location / {
+       # Redirect non-https traffic to https
+       if ($scheme != "https") {
+           return 301 https://preview.vim.org;
+       }
+    }
+}
+
+server {
+    server_name preview.vim.org;
+    listen 443 ssl;
+
+    location / {
+       proxy_pass http://nextjs;
+       proxy_set_header Host $host;
+       proxy_set_header X-Real-IP $remote_addr;
+       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+       proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location ^~ /api/ {
+         proxy_pass http://strapi;
+         proxy_http_version 1.1;
+         proxy_set_header X-Forwarded-Host $host;
+         proxy_set_header X-Forwarded-Server $host;
+         proxy_set_header X-Real-IP $remote_addr;
+         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+         proxy_set_header X-Forwarded-Proto $scheme;
+         proxy_set_header Host $http_host;
+         proxy_set_header Upgrade $http_upgrade;
+         proxy_set_header Connection "Upgrade";
+         proxy_pass_request_headers on;
+         proxy_set_header Origin http://localhost:1337;
+    }
+
+    location /cms/ {
+        rewrite ^/cms/?(.*)$ /$1 break;
+        proxy_pass http://strapi;
+        proxy_http_version 1.1;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Host $http_host;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+        proxy_pass_request_headers on;
+	    proxy_set_header Origin http://localhost:1337;
+    }
+
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
+    add_header X-XSS-Protection "1; mode=block";
+
+    ssl_certificate /etc/letsencrypt/live/preview.vim.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/preview.vim.org/privkey.pem;
+
+}