Standalone

events {}

http {
    server {
        # Plain HTTP + h2c (HTTP/1.1 and HTTP/2 prior knowledge)
        # In production, either remove this plain HTTP listener or redirect it
        # to HTTPS (note: HTTP/2 prior-knowledge clients won't follow redirects).
        listen 80;
        http2 on;
        server_name _;

        client_max_body_size 0;

        location / {
            grpc_pass grpc://app:9080;
            grpc_set_header   Host              $host;
            grpc_set_header   X-Real-IP         $remote_addr;
            grpc_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
            grpc_set_header   X-Forwarded-Proto $scheme;
        }
    }

    server {
        # HTTPS + HTTP/2 (HTTP/1.1 and HTTP/2 via ALPN)
        listen 443 ssl;
        http2 on;
        server_name _;

        ssl_certificate     /etc/nginx/certs/server.crt;
        ssl_certificate_key /etc/nginx/certs/server.key;

        ssl_protocols       TLSv1.2 TLSv1.3;
        ssl_ciphers         HIGH:!aNULL:!MD5;

        client_max_body_size 0;

        location / {
            grpc_pass grpc://app:9080;
            grpc_set_header   Host              $host;
            grpc_set_header   X-Real-IP         $remote_addr;
            grpc_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
            grpc_set_header   X-Forwarded-Proto $scheme;
        }
    }
}