nginx with ssl

events {
    
}

http {

    server {
        listen 80;
        return 301 https://$host$request_uri;
    }

    server {
        listen 443;
        server_name gerencert.app;

        ssl_certificate           /etc/nginx/ssl/MY_FILE.crt;
        ssl_certificate_key       /etc/nginx/ssl/MY_FILE.key;

        ssl on;
        ssl_session_cache  builtin:1000  shared:SSL:10m;
        ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
        ssl_prefer_server_ciphers on;

        location / {
            proxy_set_header        Host $host;
            proxy_set_header        X-Real-IP $remote_addr;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header        X-Forwarded-Proto $scheme;

            proxy_pass          http://localhost:3000;
            proxy_read_timeout  90;

            proxy_redirect      http://localhost:3000 https://MY_DOMAIN.app;
        }
    }
}