Run behind nginx

[ldionne]

Apparently, gunicorn is intended to run behind nginx configured as a reverse proxy. We should set that up in the production configuration.

[lukel97]

Btw without nginx all the endpoints including /submitRun will be accessible by anyone. So we'll probably want to nginx to also restrict the list of IPs to whatever machines we want to be producing data

[ldionne]

In the longer term, I was thinking we might require some sort of authentication token in order to submit data to the server. That would then be an application-level authentication that nginx doesn't need to know about.