nginx-ssl-server.template.conf

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name <xxxx.xxx>;

    # acem:  https://gist.github.com/zthxxx/b37cddcb17395e395ad6b430a81edd61
    # cloudflare:  https://dash.cloudflare.com/<account_id>/<domain_name>/ssl-tls/origin
    ssl_certificate /etc/nginx/ssl/<xxxx.xxx>/fullchain.cer;
    ssl_certificate_key /etc/nginx/ssl/<xxxx.xxx>/privkey.key;

    location / {
        proxy_pass http://localhost:<xxx>;
        include proxy_params;
    }
}