server:
  port: 9002
  servlet:
    context-path: /sba
  forward-headers-strategy: NATIVE
spring:
  boot:
    admin:
      ui:
        public-url: https://sba.ukerw.com

server {
	listen 80;
	server_name sba.ukerw.com;
	rewrite ^(.*) https://$server_name$1 permanent;
}
server {
	#listen 80;
	listen 443 ssl;
	server_name               sba.ukerw.com;
	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
	ssl_certificate           cert/5844997_sba.ukerw.com.pem;
	ssl_certificate_key       cert/5844997_sba.ukerw.com.key;
	ssl_session_timeout       5m;
	ssl_ciphers               ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
	ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
	ssl_prefer_server_ciphers on;

	location / {
		proxy_set_header Host $host;
	    proxy_set_header X-Real-IP $remote_addr;
	    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	    proxy_pass http://127.0.0.1:9002;
	}
}