Boiler plate NGINX SSL config for serving a locally running application. Replace everything surrounded with <>.

nginx-force-ssl.conf

server {
  listen 80;
  server_name <FQDN>;
  rewrite  ^  https://$server_name$request_uri? permanent;
}

nginx-ssl.conf

server {
    listen 443;
 
    ssl on;
    ssl_certificate <PATH_TO_CERT>;
    ssl_certificate_key <PATH_TO_KEY>;
    #enables SSLv3/TLSv1, but not SSLv2 which is weak and should no longer be used.
    ssl_protocols SSLv3 TLSv1;
    #Disables all weak ciphers
    ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM;
 
    server_name <FQDN>;
 
    location / {
        proxy_pass http://localhost:<APP_PORT>;
    }
}