[nginx] conf

PATH /etc/nginx/nginx.conf

# listen 
http {
    server {
        listen 80; # ipv4
        listen [::]:80; # ipv6
        listen 443;
        listen [::]:443;
    }
}

# return 301 (80 -> 443)
# https://nginx.org/en/docs/stream/ngx_stream_return_module.html
http {
    server {
        listen 80; # ipv4
        listen [::]:80; # ipv6
        # http -> https redirection
        return 301 $server_name$request_uri;
    }
}

# ssl
http {
    server {
        listen 443 ssl;
        listen [::]:443 ssl;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_certificate ${path};
        ssl_certificate_key ${path};
    }
}

# XFF (X-Forwarded-For, real_ip)
# https://nginx.org/en/docs/http/ngx_http_realip_module.html
http {
    server {
        set_real_ip_from ${ip};
        real_ip_header X-Forwarded-For;
    }
}