Nginx + = Secure Websockets via SSLΒΆ

hostname is locutus.lan

generate ssl certs and add to clients (see SSL).

install node:

mkdir -p ~/checkouts/node
cd ~/checkouts/node
git clone git://
cd node
git checkout v0.10.12
sudo make install

fetch example chat app:

cd ~/checkouts/node
git clone
cd psitsmike_example_1
npm install -d
node app.js

Check http://localhost:8080/ to see that it worked. Kill it. Set correct endpoint:

git apply <<'ENDOFPATCH'
diff --git a/index.html b/index.html
index a8a54c9..e2960c6 100644
--- a/index.html
+++ b/index.html
@@ -1,7 +1,7 @@
 <script src="/"></script>
 <script src=""></script>
-  var socket = io.connect('http://localhost:8080');
+  var socket = io.connect('https://locutus.lan');

   // on connection to server, ask for user's name with an anonymous callback
   socket.on('connect', function(){

Install and configure nginx (as root):

add-apt-repository --yes ppa:nginx/stable &&
    apt-get update &&
    apt-get install --yes nginx

rm /etc/nginx/sites-enabled/default

cat <<'EOF' > /etc/nginx/sites-available/locutus.lan
upstream node {
  # Directs to the process with least number of connections.

server {
  listen 80;
  listen 443 ssl;
  server_name  locutus.lan;

  ssl_certificate /etc/nginx/certs/locutus.lan/crt;
  ssl_certificate_key /etc/nginx/certs/locutus.lan/key;

  # Redirect all non-SSL traffic to SSL.
  if ($ssl_protocol = "") {
    rewrite ^ https://$host$request_uri? permanent;

  location / {
    proxy_pass http://node;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection upgrade;
    proxy_set_header Host $host;


ln -s /etc/nginx/sites-available/locutus.lan /etc/nginx/sites-enabled/locutus.lan

service nginx configtest
service nginx restart