server { listen 80; server_name nifi.example.com; return 301 https://$host$request_uri; } server { listen 443 ssl; server_name nifi.example.com; ssl_certificate ssl/example/example.com.crt; ssl_certificate_key ssl/example/example.com.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; location / { proxy_set_header X-ProxyScheme https; proxy_set_header X-ProxyHost $host; proxy_set_header X-ProxyPort 443; proxy_set_header X-ProxyContextPath /; proxy_pass http://127.0.0.1:8080; } }