Configuración Nginx: La Guía Esencial

Nginx: El Servidor Web que Siempre Necesitarás

Nginx se sienta frente a tu aplicación. Maneja terminación SSL, sirve archivos estáticos, balance de carga y proxy reverso a tus servidores de app.

Proxy Reverso Básico

server {
    listen 80;
    server_name example.com;

    location / {
        proxy_pass http://localhost:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

SSL con Let's Encrypt

server {
    listen 443 ssl http2;
    server_name example.com;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;

    location / {
        proxy_pass http://localhost:3000;
    }
}

server {
    listen 80;
    server_name example.com;
    return 301 https://$host$request_uri;
}

Archivos Estáticos

location /static/ {
    expires 1y;
    add_header Cache-Control "public, immutable";
}

location / {
    try_files $uri $uri/ @app;
}

location @app {
    proxy_pass http://localhost:3000;
}

Compresión Gzip

gzip on;
gzip_vary on;
gzip_min_length 1024;
gzip_types text/plain text/css application/json application/javascript
           text/xml application/xml text/javascript image/svg+xml;

Headers de Seguridad

add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

Comandos Comunes

nginx -t                    # probar sintaxis
systemctl reload nginx      # aplicar cambios sin downtime
tail -f /var/log/nginx/error.log