limit_req_zone $binary_remote_addr zone=ip_limit:10m rate=2r/s;

server {

  listen 443 ssl;
  
  server_name www.bodypainter.eu;
  
  ssl_protocols TLSv1.2 TLSv1.3;

  ssl_ciphers         HIGH:!aNULL:!MD5;

  ssl_certificate      /letsencrypt/live/bodypainter.eu/fullchain.pem;
  ssl_certificate_key  /letsencrypt/live/bodypainter.eu/privkey.pem;
   
  return 301 https://bodypainter.eu$request_uri;
    
}

server {

  listen 443 ssl;
  server_name bodypainter.eu;
  
  server_tokens off; 

  ssl_certificate      /letsencrypt/live/bodypainter.eu/fullchain.pem;
  ssl_certificate_key  /letsencrypt/live/bodypainter.eu/privkey.pem;
   
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_ciphers         HIGH:!aNULL:!MD5;
 
 
  location / {
  
        # Ograniczenie liczby żądań
        limit_req zone=ip_limit burst=20 nodelay;
        
        proxy_pass http://zaklik_by_node_js:3000;
        
        proxy_set_header    X-Real-IP           $remote_addr;
        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto   $scheme;
        proxy_set_header    Host                $host;
        proxy_set_header    X-Forwarded-Host    $host;
        proxy_set_header    X-Forwarded-Port    $server_port;
  }
     
}