ssl_certificate /etc/letsencrypt/live/nsfisis.dev/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/nsfisis.dev/privkey.pem; ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; server { listen 443 ssl; listen [::]:443 ssl; server_name nsfisis.dev; location / { root /usr/share/nginx/html; } } server { listen 443 ssl; listen [::]:443 ssl; server_name blog.nsfisis.dev; location / { proxy_pass http://blog_nsfisis_nginx:80; } }