server {                                                                                                                                                                                      
  listen 80;  
  server_name t.a.a.info;
  root        /srv/phabricator/phabricator/webroot;
  client_max_body_size 32m;
  charset utf-8;
  
  location / {
    index index.php;
    rewrite ^/(.*)$ /index.php?__path__=/$1 last;
  }

  location /index.php {
    fastcgi_pass   unix:/var/run/php5-fpm.sock;
    fastcgi_index   index.php;

    #required if PHP was built with --enable-force-cgi-redirect
    fastcgi_param  REDIRECT_STATUS    200;

    #variables to make the $_SERVER populate in PHP
    fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
    fastcgi_param  QUERY_STRING       $query_string;
    fastcgi_param  REQUEST_METHOD     $request_method;
    fastcgi_param  CONTENT_TYPE       $content_type;
    fastcgi_param  CONTENT_LENGTH     $content_length;

    fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;

    fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
    fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;

    fastcgi_param  REMOTE_ADDR        $remote_addr;
  }
 
 location = /ws/ {
    proxy_pass http://websocket_pool;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_read_timeout 999999999;
  }
}

server {                                                                                                                                                                                      
    listen 80;
    listen 443 ssl; 
    server_name t.a.a.info;
    client_max_body_size 32M; 

    ssl on;
    ssl_certificate_key /etc/nginx/ssl/a.key.pem;
    ssl_certificate /etc/nginx/ssl/a.crt;
  
    ssl_ciphers "AES128+EECDH:AES128+EDH";
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/nginx/ssl/dhparam.pem;
    
    if ($ssl_protocol = "") {
        rewrite ^ https://$host$request_uri? permanent;
    }     

    location / {
        proxy_pass http://10.0.107.4;
        proxy_set_header Host $host;                                                                   
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }    
}

wscat -c ws://127.0.0.1:22280/
... error: Error: connect ECONNREFUSED

wscat -c ws://t.a.a.info/ws/
... error: Error: unexpected server response (502)

wscat -c ws://t.a.a.info/ws
... error: Error: unexpected server response (301)