You are right, you are using location and proxy_pass a wrong way. When you use the location /vault { proxy_pass http://vault:8200; } construction, you are passing your URI to the upstream as-is, while most likely you want to strip the /vault prefix from it. To do it, you should use this one: location /vault/ { … Read more
This is now possible with the addition of the ngx_stream_ssl_preread module added in Nginx 1.11.5 and the ngx_stream_map module added in 1.11.2. This allows Nginx to read the TLS Client Hello and decide based on the SNI extension which backend to use. stream { map $ssl_preread_server_name $name { vpn1.app.com vpn1_backend; vpn2.app.com vpn2_backend; https.app.com https_backend; default … Read more
Add the following to your conf file fastcgi_buffers 16 16k; fastcgi_buffer_size 32k;