events { worker_connections 1024; } http { server_tokens off; charset utf-8; server { listen 80 default_server; server_name _; return 301 https://$host$request_uri; } server { listen 443 ssl http2; ssl_certificate /etc/letsencrypt/live/adam-french.co.uk/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/adam-french.co.uk/privkey.pem; server_name adam-french.co.uk; location ~ /.well-known/acme-challenge/ { root /var/www/certbot; } location /api/ { proxy_pass http://localhost:8080; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } } }