server { server_name kuma.mydomain.com; listen 443 ssl; listen 8443 ssl; http2 on; access_log /var/log/nginx/kuma.mydomain.com_access_log main; error_log /var/log/nginx/kuma.mydomain.com_error_log info; location / { proxy_pass http://127.0.0.1:3331/; proxy_set_header Connection $connection_upgrade; proxy_set_header Upgrade $http_upgrade; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } include com.mydomain/certbot.conf; }