Obtain an SSL certificate, https://zerossl.com/ is an option.
Get the following 3 files
- ca_bundle.crt
- certificate.crt
- private.key
cat ca_bundle.crt certificate.crt > certificate-combined.crt
server {
listen 8080 default_server;
listen [::]:8080 default_server;
listen 8443 ssl default_server;
listen [::]:8443 ssl default_server;
ssl on;
ssl_certificate /root/certificate-combined.crt;
ssl_certificate_key /root/private.key;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name <domain.com>;
location / {
try_files $uri $uri/ =404;
}
location ^~ /static/ {
root /data/;
autoindex on;
}
}