template.config

server {
	listen					80;
	server_name 			example.com *.example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 					443 ssl http2;
    listen 					[::]:443 ssl http2;
	server_name 			example.com *.example.com;
	
	location / {
		proxy_pass         	http://localhost:5000;
        proxy_http_version 	1.1;
        proxy_set_header   	Upgrade $http_upgrade;
        proxy_set_header   	Connection $http_connection;
        proxy_set_header   	Host $host;
        proxy_cache_bypass 	$http_upgrade;
        proxy_set_header   	X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   	X-Forwarded-Proto $scheme;
    }
    
    # Turn off access logging
    access_log off;
    
    # Max Body Size
    client_max_body_size 10M;

    # SSL/TLS settings
    ssl_certificate /etc/ssl/certs/example.com.crt;
    ssl_certificate_key /etc/ssl/private/example.com.key;
    ssl_dhparam /etc/nginx/dhparam.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
}