infrastructure/roles/metabase/templates/finance-nginx.conf.j2

server {
    include      snippets/listen-80.conf;
    server_name  {{ finance_domain }};

    access_log   /var/log/nginx/{{ finance_domain }}/access.log reduced;
    access_log   /var/log/nginx/{{ finance_domain }}/access.log.json json_reduced;
    error_log    /var/log/nginx/{{ finance_domain }}/error.log;

    include snippets/letsencrypt.conf;

    location / {
        access_log off;
        return 301 https://$server_name$request_uri;
    }
}

server {
    include      snippets/listen-443.conf;
    server_name  {{ finance_domain }};

    access_log   /var/log/nginx/{{ finance_domain }}/access.log main;
    access_log   /var/log/nginx/{{ finance_domain }}/access.log.json json_main;
    error_log    /var/log/nginx/{{ finance_domain }}/error.log;

    acme_certificate     letsencrypt;
    ssl_certificate      $acme_certificate;
    ssl_certificate_key  $acme_certificate_key;

    location / {
        proxy_pass http://127.0.0.1:3000;

        proxy_set_header    Host               $host;
        proxy_set_header    X-Real-IP          $remote_addr;
        proxy_set_header    X-Forwarded-For    $remote_addr;
        proxy_set_header    X-Forwarded-Proto  $scheme;
    }
}