HTTPS Reverse Proxy Configuration in Nginx

virtual.conf

upstream backend-server {
    server backend.com:443;
}

server {
    root /home/ec2-user/app/public;
    index index.html;
    server_name app.com;

    location /app-proxy/ {
        rewrite ^/app-proxy/(.*)$ /$1 break;
        proxy_pass https://backend-server;
        proxy_ssl_session_reuse on;
    }

    location ~ /\. {
        deny all;
    }

    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/app.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/app.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}


server {
    if ($host = app.com) {
        return 301 https://$host$request_uri;
    }

    listen 80;
    server_name app.com;
    return 404;
}