map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { server_name docs.mydomain.com; listen 443 ssl; listen 8443 ssl; http2 on; access_log /var/log/nginx/docs.mydomain.com_access_log main; error_log /var/log/nginx/docs.mydomain.com_error_log info; proxy_buffering off; location / { proxy_pass http://127.0.0.1:2276/; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_redirect off; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Forwarded-Proto $scheme; add_header Referrer-Policy "strict-origin-when-cross-origin"; } include com.mydomain/certbot.conf; }