vmware vcsa 6.7 nginx basic config (fix for HTTP Status 400 – Bad Request)

vcsa.conf

server {
    # server_name your.host.lan # use this if not the only proxy for 443
    listen 443 ssl http2 default_server; # the default_server may break other servers listening on 443, and there can only be one.

    ssl_certificate /etc/ssl/letsencrypt/fullchain.pem;
    ssl_certificate_key /etc/ssl/letsencrypt/privkey.pem;

    location / {
      proxy_pass https://xxx; #IP or fqdn
      proxy_set_header Host $http_host; # the magic
    }
}