server { listen 80; server_name domain; ignore_invalid_headers off; client_max_body_size 0; proxy_buffering off; location / { proxy_pass http://site_name:9000; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Real-IP $remote_addr; # Default is HTTP/1, keepalive is only enabled in HTTP/1.1 proxy_http_version 1.1; proxy_set_header Connection ""; chunked_transfer_encoding off; } listen 443 ssl; ssl_certificate /etc/letsencrypt/tmp/domain/fullchain.pem; ssl_certificate_key /etc/letsencrypt/tmp/domain/privkey.pem; }