server { listen 80; listen [::]:80; server_name myexample.com www.myexample.com; return 301 https://myexample.com$request_uri; return 301 https://www.myexample.com$request_uri; } upstream backendurl { server 127.0.0.1:3000; } server { listen 443 ssl; listen [::]:443 ssl; server_name myexample.com www.myexample.com; location / { proxy_pass http://backendurl; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } } ssl_certificate /etc/letsencrypt/live/myexample.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/myexample.com/privkey.pem ssl_prefer_server_ciphers on; ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log info;