upstream wifi_proxy { server frodo.natalieandjoshua.com:80; } server { listen 443; server_name wifi.natalieandjoshua.com; location / { proxy_pass http://wifi_proxy/; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $http_host; } ssl on; ssl_certificate /etc/dehydrated/certs/wifi.natalieandjoshua.com/fullchain.pem; ssl_certificate_key /etc/dehydrated/certs/wifi.natalieandjoshua.com/privkey.pem; ssl_protocols TLSv1.2; }