ssl nginx

server {
        listen *:80 default_server;
        listen [::]:80 default_server;

        location / {
                proxy_pass http://localhost:8000;
        }
 }

server {

  
        location / {
                proxy_pass http://localhost:8000;
        }

     
        server_name CHANGE_IT; # managed by Certbot

        listen [::]:443 ssl ipv6only=on; # managed by Certbot
        listen *:443 ssl; # managed by Certbot
        ssl_certificate /etc/letsencrypt/live/CHANGE_IT/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/CHANGE_IT/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = CHANGE_IT) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen *:80 ;
    listen [::]:80 ;
    server_name CHANGE_IT;
    return 404; # managed by Certbot
}