proxy.conf

server {
    listen               443 ssl;
    ssl                  on;
    ssl_certificate      /etc/ssl/certs/key.crt;
    ssl_certificate_key  /etc/ssl/private/key.key;
    server_name hostname.tld;
    location / {
      allow 127.0.0.1;
      #allow all;
      deny all;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection $connection_upgrade;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-Proto https;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-NginX-Proxy true;
      proxy_set_header X-Url-Scheme $scheme; 
      proxy_max_temp_file_size 0;
      proxy_pass http://127.0.0.1:8080;
      proxy_redirect off;
    }
  }