server { listen 80; listen [::]:80; server_name $HOST_GEOSERVER; return 301 https://$HOST_GEOSERVER${DOLAR}request_uri; } server { listen 443 ssl; listen [::]:443; server_name $HOST_GEOSERVER; ssl_certificate /etc/nginx/certs/fullchain.pem; ssl_certificate_key /etc/nginx/certs/privkey.pem; location / { proxy_pass http://geoserver:8080; proxy_set_header X-Forwarded-For ${DOLAR}proxy_add_x_forwarded_for; proxy_set_header Host ${DOLAR}http_host; proxy_redirect default; } }