Nginx as reverse proxy in Django - Mini Project: Build & Apply

Nginx as Reverse Proxy for Django

📖 Scenario: You have a Django web application running on your local machine on port 8000. You want to set up Nginx as a reverse proxy to forward requests from port 80 to your Django app. This setup helps improve performance and security by letting Nginx handle client requests first.

🎯 Goal: Build a simple Nginx configuration file that acts as a reverse proxy forwarding HTTP requests to your Django app running on localhost:8000.

📋 What You'll Learn

Create a basic Nginx server block configuration

Set the server to listen on port 80

Use proxy_pass to forward requests to http://localhost:8000

Include necessary proxy headers for Django compatibility

💡 Why This Matters

🌍 Real World

Using Nginx as a reverse proxy is common in deploying Django apps to improve security, performance, and scalability.

💼 Career

Many web developer and DevOps roles require configuring Nginx to serve as a reverse proxy for backend applications like Django.

1

Create the Nginx server block skeleton

Create a file called nginx.conf and write a basic server block that listens on port 80 with an empty location / block.

Django

server {
    listen 80;
    location / {
        # Your code here
    }
}

Hint

Start by defining the server block and set it to listen on port 80. Add an empty location / block inside.

2

Add the proxy_pass directive

Inside the location / block, add the line proxy_pass http://localhost:8000; to forward requests to the Django app running on port 8000.

Django

server {
    listen 80;
    location / {
        # Add proxy_pass here
    }
}

Hint

Use proxy_pass inside the location / block to forward all requests to http://localhost:8000.

3

Add proxy headers for Django compatibility

Inside the location / block, add these lines to set headers:
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

Django

server {
    listen 80;
    location / {
        proxy_pass http://localhost:8000;
        # Add proxy headers here
    }
}

Hint

These headers help Django know the original request details like host and client IP.

4

Complete the Nginx reverse proxy configuration

Add the server_name localhost; line inside the server block to specify the server name.

Django

server {
    listen 80;
    # Add server_name here
    location / {
        proxy_pass http://localhost:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

Hint

Setting server_name helps Nginx know which requests to handle.

Practice

1. What is the main role of Nginx when used as a reverse proxy for a Django application?

easy

A. Replace the Django application with a static website

B. Directly execute Django Python code

C. Forward client requests to the Django application server

D. Store the Django database backups

Solution

1. Step 1: Understand Nginx reverse proxy function

   Nginx acts as a middleman that receives client requests and forwards them to the Django app server.

2. Step 2: Identify what Nginx does not do

   Nginx does not replace Django, execute Python code, or store backups; it only forwards requests and can serve static files.

3. Final Answer:

   Forward client requests to the Django application server -> Option C

4. Quick Check:

   Nginx forwards requests [OK]

Hint: Nginx forwards requests to Django, it doesn't run Django code [OK]

Common Mistakes:

• Thinking Nginx runs Django code
• Confusing Nginx with a database
• Assuming Nginx replaces Django app

2. Which Nginx configuration snippet correctly sets it as a reverse proxy forwarding requests to a Django app running on port 8000?

easy

A. location / { proxy_pass http://127.0.0.1:8000; }

B. location / { root /var/www/html; }

C. location / { fastcgi_pass 127.0.0.1:8000; }

D. location / { proxy_redirect off; }

Solution

1. Step 1: Identify correct proxy directive

   To forward requests, Nginx uses proxy_pass with the Django app address and port.

2. Step 2: Check other options for correctness

   root serves static files, fastcgi_pass is for FastCGI apps, and proxy_redirect controls redirects but doesn't forward requests.

3. Final Answer:

   location / { proxy_pass http://127.0.0.1:8000; } -> Option A

4. Quick Check:

   Use proxy_pass for reverse proxy [OK]

Hint: proxy_pass forwards requests to backend server [OK]

Common Mistakes:

• Using root instead of proxy_pass for proxying
• Confusing fastcgi_pass with proxy_pass
• Omitting the backend address in proxy_pass

3. Given this Nginx config snippet, what happens when a client requests /static/css/style.css?

location /static/ {
    alias /home/user/myproject/static/;
}
location / {
    proxy_pass http://127.0.0.1:8000;
}

medium

A. Nginx serves the static file directly from /home/user/myproject/static/css/style.css

B. Nginx forwards the request to Django app on port 8000

C. Nginx returns a 404 error because alias is incorrect

D. Nginx redirects the request to /static/css/style.css on Django

Solution

1. Step 1: Understand alias directive for static files

   The location /static/ block uses alias to serve files directly from the filesystem path.

2. Step 2: Analyze request routing

   Requests to /static/ are served by Nginx from the alias path; other requests go to Django via proxy_pass.

3. Final Answer:

   Nginx serves the static file directly from /home/user/myproject/static/css/style.css -> Option A

4. Quick Check:

   Static files served by alias [OK]

Hint: alias serves static files directly, proxy_pass forwards others [OK]

Common Mistakes:

• Thinking all requests go to Django
• Confusing alias with root directive
• Assuming Nginx redirects instead of serving static files

4. You configured Nginx as a reverse proxy for Django but get a 502 Bad Gateway error. Which fix is most likely correct?

medium

A. Change Nginx config to use root instead of proxy_pass

B. Start the Django app server on the port Nginx proxies to

C. Remove the location block for static files

D. Disable firewall on the client machine

Solution

1. Step 1: Understand 502 Bad Gateway cause

   502 means Nginx cannot connect to the backend server, often because it is not running or listening on the expected port.

2. Step 2: Identify the correct fix

   Starting the Django app server on the port Nginx expects resolves the connection issue.

3. Final Answer:

   Start the Django app server on the port Nginx proxies to -> Option B

4. Quick Check:

   502 error means backend not reachable [OK]

Hint: 502 means backend server not running or unreachable [OK]

Common Mistakes:

• Changing root instead of fixing backend server
• Removing static files block unrelated to 502
• Disabling client firewall won't fix server connection

5. You want Nginx to serve static files directly and forward all other requests to Django on port 8000. Which combined Nginx config snippet achieves this correctly?

hard

A. location /static/ { proxy_pass http://127.0.0.1:8000; } location / { alias /var/www/myproject/static/; }

B. location / { alias /var/www/myproject/static/; } location /static/ { proxy_pass http://127.0.0.1:8000; }

C. location /static/ { root /var/www/myproject/static/; } location / { proxy_redirect http://127.0.0.1:8000; }

D. location /static/ { alias /var/www/myproject/static/; } location / { proxy_pass http://127.0.0.1:8000; }

Solution

1. Step 1: Serve static files with alias

   The location /static/ block uses alias to serve static files from the filesystem path.

2. Step 2: Forward other requests with proxy_pass

   The location / block forwards all other requests to Django running on port 8000 using proxy_pass.

3. Final Answer:

   location /static/ { alias /var/www/myproject/static/; } location / { proxy_pass http://127.0.0.1:8000; } -> Option D

4. Quick Check:

   Static files alias + proxy_pass for others [OK]

Hint: Use alias for static, proxy_pass for app requests [OK]

Common Mistakes:

• Swapping alias and proxy_pass locations
• Using proxy_redirect instead of proxy_pass
• Using root instead of alias causing path issues