# Replace crm.example.fr and certificate paths with the real domain/certificate. server { listen 80; server_name backmapension.crm.example.fr *.crm.example.fr; return 301 https://$host$request_uri; } server { listen 443 ssl; server_name backmapension.crm.example.fr *.crm.example.fr; ssl_certificate /etc/letsencrypt/live/crm.example.fr/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/crm.example.fr/privkey.pem; client_max_body_size 16m; location / { proxy_pass http://127.0.0.1:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Port 443; } }