nginx.conf

user nginxuser;
pid /tmp/nginx.pid;

events {
}

http {
    upstream backend {
        server backend:3002;
    }

    server {
        # Redirect HTTP requests to HTTPS.
        listen 80;
        server_name localhost;
        root /srv/public;
        return 301 https://$host$request_uri;
    }

    server {
        listen 443 ssl;

        server_name localhost;
        root /srv/public;
        server_tokens off;

        ssl_certificate /etc/ssl/private/certificate.crt;
        ssl_certificate_key /etc/ssl/private/private.key;

        location / {
            try_files $uri $uri/ @backend;
        }

        location @backend {
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto https;
            proxy_set_header X-Forwarded-Ssl on;
            proxy_set_header Host $http_host;
            proxy_redirect off;
            proxy_pass http://backend;
            proxy_cookie_path / "/; HTTPOnly; Secure";
        }

        # WebSocket configuration
        location /socket.io/ {
            proxy_pass http://backend;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $host;
        }
    }
}