upstream squeeze_proxy { server peregrin.natalieandjoshua.com:9000; } server { listen 443; server_name squeeze.ovalwonder.com; location / { proxy_pass http://squeeze_proxy/; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } ssl on; ssl_certificate /etc/letsencrypt/live/squeeze.ovalwonder.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/squeeze.ovalwonder.com/privkey.pem; ssl_protocols TLSv1.2; }