Настройка Nginx:
map $scheme $port { default 80; http 80; https 8443; }
server {
listen 80;
listen 443 ssl;
server_name _;
ssl_certificate /etc/nginx/ssl/chained-cert.crt;
ssl_certificate_key /etc/nginx/ssl/sslkey.key;
ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
location / {
proxy_pass http://127.0.0.1:$port;
}
}
Читать далее «Tomcat behind ssl Nginx reverse proxy»