Advice on nginx public endpoint

[Thomas Burke]

Hello,  and thanks ,

Looking for advice on creating a public endpoint with bitbucket / nginx as not an expert on latter.

We have  Bitbucket on SSL serving proxy for on-premise. on the same server

We need to perform a migration to cloud  Atlassian Bitbucket, therefore needing a public endpoint.

Our network team tried to create NAT access to the server on  443  like https://111.121.122.113:8388 but we always got a timeout. The reason given, the  Firewall we connect already using  443.  Therefore the suggestion was to use port 80.  which is fine however when they  NAT  port  80  all we get it the "Nginx Welcome" page.

Is there a way we may alter the  Nginx.conf below to get to the bitbucket server from outside NAT  given to us by network team  https://111.121.122.113:8388 ,   without disrupting the current inhouse users from accessing  internally on-prem with http://bitbucket.thomkinsltd.org  ?

The nginx.conf  (obfuscated)

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
worker_connections 768;
# multi_accept on;
}

http {

##
# Basic Settings
##

client_max_body_size 0;
proxy_max_temp_file_size 0;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
# server_tokens off;

# server_names_hash_bucket_size 64;
# server_name_in_redirect off;

include /etc/nginx/mime.types;
default_type application/octet-stream;

##
# SSL Settings
##

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
#######

##
# Virtual Host Configs
##

include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;

server {
listen 80;
listen 443 ssl;
server_name bitbucket.thomkinsltd.org;
#ssl on;
ssl_certificate /etc/nginx/ssl/bitbucket_thomkinsltd_org.crt;
ssl_certificate_key /etc/nginx/ssl/bitbucket_thomkinsltd_org.key;
ssl_session_timeout 5m;
ssl_protocols ;
ssl_ciphers ;
ssl_prefer_server_ciphers on;

# Optional optimisation - please refer to
# http://nginx.org/en/docs/http/configuring_https_servers.html
# ssl_session_cache shared:SSL:10m;
location / {
proxy_pass http://bitbucket.thomkinsltd.org:7990;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off;
}
}
}