proxy-pass-nginx-ssl.sh

server {

	server_name domain.host;

	listen 443 ssl http2; # managed by Certbot
  	ssl_certificate /etc/letsencrypt/live/domain.host/fullchain.pem; # managed by Certbot
  	ssl_certificate_key /etc/letsencrypt/live/domain.host/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot

	ssl_protocols TLSv1.2 TLSv1.1 TLSv1;

  	error_log /var/log/website/domain.host_ssl_error_log.log;

	location / {
		proxy_pass http://127.0.0.1:80;
		proxy_set_header Host $http_host;
		proxy_set_header X-Forwarded-Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto https;
		proxy_set_header HTTPS "on";
	}

}