Nginx Configuration for Django

# /etc/nginx/sites-available/project.conf (Gunicorn via Unix socket)

server {
    listen 80;
    server_name example.com www.example.com;

    # Max upload size
    client_max_body_size 20m;

    # Serve static files
    location /static/ {
        alias /srv/project/staticfiles/;
        access_log off;
        expires 7d;
    }

    # Serve media files (user uploads)
    location /media/ {
        alias /srv/project/media/;
        access_log off;
        expires 7d;
    }

    # Proxy all other requests to Gunicorn (Unix socket)
    location / {
        include proxy_params;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://unix:/run/gunicorn.sock;
    }
}
      

# Enable site and test config (Debian/Ubuntu)

sudo ln -s /etc/nginx/sites-available/project.conf /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx
      

# Optional: Let's Encrypt TLS (certbot + nginx)

sudo apt-get install -y certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com

# Auto-renew (usually installed by certbot)
sudo systemctl status certbot.timer