This is a config template for a nginx reverse proxy with SSL termination.
- You'll need a
nginx.confwhich willinclude conf.d/*.conf;in thehttpsection.
Otherwise, you'll need to figure out what's the best way for you to include the configuration. - SSL certificate files
server.pemandserver-key.pemin directorycerts/. extra/dhparam.pem, which you'll have to generate viaopenssl dhparam -out extra/dhparam.pem 4096(this can happen anywhere, whereopensslis available, i.e. this does not have to happen on the server itself).
- Domain name of the proxy server:
server_namein vhost.conf. - Host of the server without SSL behind this proxy:
proxy_passin vhost.conf. - If you're not using docker, you need to adjust the IP of the DNS:
resolverin ssl.conf.