nginx minimal https reverse proxy configuration

proxy.conf

server {
  listen 80;
  server_name localhost;

  location / {
    proxy_pass http://webserver:8080;
  }
}

server {
  listen 443 ssl;
  server_name localhost;
  ssl_certificate /etc/nginx/conf.d/selfsigned.crt;
  ssl_certificate_key /etc/nginx/conf.d/selfsigned.key;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers HIGH:!aNULL:!MD5;

  location / {
    proxy_pass http://webserver:8080;
  }
}

creating certificate with sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/conf.d/selfsigned.key -out /etc/nginx/conf.d/selfsigned.crt

If you are lazy and don't want to create the certs yourself, just apt install ssl-cert and it creates snakoil certs when installed.

If you are lazy and don't want to create the certs yourself, just apt install ssl-cert and it creates snakoil certs when installed.

TIL 👍