server { listen 80 default_server; listen [::]:80 default_server; include /etc/nginx/snippets.d/certbot.conf; location / { return 301 https://$host$request_uri; } } server { listen 443 ssl http2 default_server; listen [::]:443 ssl http2 default_server; ssl_certificate /etc/letsencrypt/live/$ssl_server_name/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/$ssl_server_name/privkey.pem; include /etc/nginx/snippets.d/certbot.conf; location / { proxy_http_version 1.1; proxy_set_header Connection $http_connection; proxy_set_header Host $host; proxy_set_header Upgrade $http_upgrade; proxy_set_header X-Forwarded-For $remote_addr; proxy_pass http://10.57.100.8:8080; } }