upstream smile { server smile-server:8001; } server { listen 80; server_name smm.dsrs.illinois.edu; server_tokens off; location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { return 301 https://$host$request_uri; } } server { listen 443 ssl; server_name smm.dsrs.illinois.edu; server_tokens off; ssl_certificate /etc/letsencrypt/live/smm.dsrs.illinois.edu/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/smm.dsrs.illinois.edu/privkey.pem; include /etc/letsencrypt/options-ssl-nginx.conf; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; location / { proxy_pass http://smile; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $host; proxy_redirect off; } }