server { listen 80; listen [::]:80; server_name myexample.com www.myexample.com; return 301 https://myexample.com$request_uri; return 301 https://www.myexample.com$request_uri; } upstream backendurl { server 127.0.0.1:8080; } server { listen 443 ssl; listen [::]:443 ssl; server_name myexample.com www.myexample.com; location / { proxy_pass http://backendurl; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } ssl_certificate /etc/ssl/certs/iRedMail.crt; ssl_certificate_key /etc/ssl/private/iRedMail.key; ssl_prefer_server_ciphers on; ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log info; }