server { listen 192.168.1.2:80; server_name secure.898.ro; return 301 https://$host$request_uri; } server { listen 192.168.1.2:443 http2 ssl; server_name secure.898.ro; ssl_certificate /etc/letsencrypt/live/secure.898.ro/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/secure.898.ro/privkey.pem; include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot access_log /var/log/nginx/secure.898.ro.access.log; error_log /var/log/nginx/secure.898.ro.error.log notice; location / { proxy_pass http://127.0.0.1:9800; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; } }