nginx + uWSGI + sopds в sub-uri домена

http {
    upstream django_sopds {
        server unix:///var/run/uwsgi/app/sopds/socket;
    }

	server {
	...

	location /sopds {
	    allow all;

	    include          uwsgi_params;
	    uwsgi_pass   django_sopds;

	    access_log /var/log/nginx/sopds-access.log;
	    error_log    /var/log/nginx/sopds-error.log;
	}

	location ^~ /sopds/static/ {
	    alias /var/www/sopds/static/;
	    access_log off;
	    error_log  off;
	}
}

[uwsgi]
# конфиг без virtualenv, python системный
# если с virtualenv, то добавить параметр
# venv = /path/to/virtualenv/
plugin = python3

# папка приложения
chdir = /var/www/sopds/

# sopds в sub-uri "/sopds" домена, т.е.
# www.example.com/sopds
mount = /sopds=sopds/wsgi.py
manage-script-name = true

callable = application
processes = 4
threads = 2

# пользователь, под которым запускаем uwsgi
uid = www-data
gid = www-data

STATIC_URL = '/sopds/static/'

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
       }

http   {

    upstream django_sopds {
        server unix:///var/run/uwsgi/app/sopds/socket;
    }

    ## Basic Settings
    sendfile on;
    sendfile_max_chunk  128k;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    include win-utf;

    ## Logging Settings
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    gzip on;
    gzip_disable "msie6";
    ssi on;    

    server {
      listen 80 default_server;
      server_tokens off;
      server_name  example.com www.example.com;
      # enforce https
      return 301 https://$server_name$request_uri;
    }

    server {
        listen 443 ssl;
        server_name  example.com www.example.com;
        server_tokens off;

        ssl_certificate     /etc/letsencrypt/live/example.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

        # Add headers to serve security related headers
        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
        add_header X-Content-Type-Options nosniff;
        add_header X-Download-Options noopen;
        add_header X-Permitted-Cross-Domain-Policies none;
        add_header X-Frame-Options "SAMEORIGIN";
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Robots-Tag none;

        keepalive_timeout 5 5;
        send_timeout 10;

        client_body_timeout 10;
        client_header_timeout 10;
        output_buffers 1 32k;
        postpone_output 1460;
        access_log  /var/log/nginx/example.com/access.log;
        error_log   /var/log/nginx/example.com/error.log;

        location / {
            root /var/www/example.com/www;
            charset utf-8;
            index  index.html;
        }

        # Simple OPDS server
        location /sopds {
            include      uwsgi_params;
            uwsgi_pass   django_sopds;

            access_log /var/log/nginx/sopds/sopds-access.log;
            error_log  /var/log/nginx/sopds/sopds-error.log;
        }

        # Simple OPDS static content
        location ^~ /sopds/static/ {
            alias /var/www/sopds/static/;

            access_log /var/log/nginx/sopds/sopds-static-access.log;
            error_log  /var/log/nginx/sopds/sopds-static-error.log;
        }
    }
}