server { listen 443 ssl; listen [::]:443 ssl; server_name example.com; ssl_certificate /etc/nginx/ssl/*.example.com_2048/fullchain.cer; ssl_certificate_key /etc/nginx/ssl/*.example.com_2048/private.key; location / { proxy_pass https://0.0.0.0:8190; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Host $host; client_max_body_size 50M; } location /.well-known/acme-challenge { proxy_set_header Host $host; proxy_set_header X-Real_IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr:$remote_port; proxy_pass http://127.0.0.1:9180; } }