nginx.conf

user nginx;
worker_processes auto;

pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

# Log to stdout for Docker
error_log /dev/stdout info;

events {
	worker_connections 768;
	# multi_accept on;
}

http {
	charset   utf-8;
	keepalive_timeout  65;
	server_tokens       off;
	tcp_nopush          on;
	tcp_nodelay         off;

	ssl on;

	ssl_certificate $CERT_LOCATION;
        ssl_certificate_key $KEY_LOCATION;
	$TRUSTCHAIN

        ssl_session_cache shared:SSL:20m;
        ssl_session_timeout 60m;
        ssl_prefer_server_ciphers on;
        ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

        ssl_stapling on;
        ssl_stapling_verify on;

        error_page 497  https://$host:$server_port$request_uri;

        server {
                listen ${OPENSHR_FWD_PORT};
                server_name ${SERVER_NAME};

                location / {
                        proxy_pass http://openshr:8080;
                        proxy_read_timeout   240;
                }
        }

}