Nginx config for reverse proxy to salt-api with SSL

master

rest_cherrypy:
    port: 8000
    host: 127.0.0.1
    debug: True
    webhook_disable_auth: True
    disable_ssl: True
    collect_stats: True

salt-api.conf

upstream ge {
    server 127.0.0.1:8000;
}

server {
    listen 80;
    server_name salt.example.com;
    rewrite ^ https://$server_name$request_uri? permanent;
}

server {
    listen 443 ssl;
    server_name salt.example.com;
    ssl_certificate /etc/nginx/certs/example_com_bundle.crt;
    ssl_certificate_key /etc/nginx/certs/example.com.key.nopass;

    location / {
        proxy_pass http://ge; 
    }
}