server { listen *:3443 ssl; ssl_certificate /services-keys/ExpressTLS/cert.pem; ssl_certificate_key /services-keys/ExpressTLS/key.pem; ssl_protocols TLSv1.3; location / { proxy_pass http://localhost:3080/; } } server { listen 127.0.0.1:3080; location / { proxy_pass https://express-tls:8443/; } }