nginx.conf

events {
    
}

http {
    server {
    
        listen 443 ssl;

        ssl_certificate /etc/nginx/ssl/ssl.crt;
        ssl_certificate_key /etc/nginx/ssl/ssl.key;
        ssl_session_cache shared:SSL:10m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-EDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
        ssl_prefer_server_ciphers on;

        gzip on;
        gzip_min_length 1000;
        gzip_types text/plain application/xml application/javascript application/json;

        location / {
            proxy_pass http://frontend/;
            proxy_set_header Host $host;
            proxy_redirect http:// https://;
        }

        location /api/ {
            auth_request off;
            proxy_pass http://backend/api/;
            proxy_set_header Host $host;
            proxy_redirect http:// https://;
        }
						
        location = /auth {
            proxy_pass http://backend/api/user/basicAuth;
            proxy_pass_request_body off;
            proxy_redirect http:// https://;
        }

        location /music/ {
            auth_request /auth;
            proxy_pass http://files/;
            proxy_set_header Host $host;
            proxy_redirect http:// https://;
        }
    }
}