set_real_ip_from 10.0.0.0/8; real_ip_header X-Real-IP; real_ip_recursive on; location / { proxy_pass http://127.0.0.1:{{ shop_port }}; } location = /favicon.ico { alias {{ shop_dir }}/assets/favicon.ico; } location /assets/ { alias {{ shop_dir }}/assets/; } location ~ ^/orders(?:/(.*))?$ { allow 10.0.0.0/8; deny all; proxy_pass http://127.0.0.1:{{ shop_port }}; } location ~ ^/promos(?:/(.*))?$ { allow 10.0.0.0/8; deny all; proxy_pass http://127.0.0.1:{{ shop_port }}; }