server listen 443 ssl http2; server_name proxy.mycompany.com;
# Proxy certificate (signed by corporate CA) ssl_certificate /etc/nginx/ssl/proxy.crt; ssl_certificate_key /etc/nginx/ssl/proxy.key; ssl video proxy
location /video/ proxy_pass https://video_origin; # SSL termination settings proxy_ssl_verify on; proxy_ssl_trusted_certificate /etc/nginx/ssl/upstream-ca.crt; proxy_ssl_server_name on; # SNI support # Caching video segments (1 hour) proxy_cache_path /var/cache/nginx/video levels=1:2 keys_zone=video_cache:10g max_size=50g; proxy_cache video_cache; proxy_cache_key "$scheme$proxy_host$request_uri"; proxy_cache_valid 200 1h; # Buffering for video (large chunks) proxy_buffering on; proxy_buffer_size 16k; proxy_buffers 8 32k; proxy_busy_buffers_size 64k; # Headers for HLS/DASH proxy_set_header Host $proxy_host; proxy_set_header X-Forwarded-For $proxy_addr; server listen 443 ssl http2; server_name proxy