Nginx reverse proxy with SSL

gistfile1.txt

server {
  listen 443 ssl;
  server_name <server>;

  root /srv/<app>/public;
  try_files $uri/index.html $uri.html $uri @app;

  location @app {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Host $http_host;
    proxy_redirect off;
    proxy_pass http://<app>;
  }

  ssl on;
  ssl_certificate /etc/letsencrypt/live/<server>/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/<server>/privkey.pem;
  ssl_stapling on;
  ssl_stapling_verify on;
  ssl_trusted_certificate /etc/letsencrypt/live/<server>/fullchain.pem;
  ssl_session_timeout 5m;
}

server {
  listen 80;
  server_name <server>;
  return 301 https://$server_name$request_uri;
}