server {
    listen               80;
    server_name          nifi.example.com;
    return               301 https://$host$request_uri;
}

server {
    listen               443 ssl;
    server_name          nifi.example.com;
    ssl_certificate      ssl/example/example.com.crt;
    ssl_certificate_key  ssl/example/example.com.key;
    ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers          HIGH:!aNULL:!MD5;
    location / {
        proxy_set_header     X-ProxyScheme https;
        proxy_set_header     X-ProxyHost $host;
        proxy_set_header     X-ProxyPort 443;
        proxy_set_header     X-ProxyContextPath "";
        proxy_set_header     Host nifi;
        proxy_ssl_verify     off;
        proxy_ssl_protocols  TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        proxy_pass           https://172.16.1.9:8443;
    }
    location /nifi-registry {
        proxy_set_header     X-ProxyScheme https;
        proxy_set_header     X-ProxyHost $host;
        proxy_set_header     X-ProxyPort 443;
        proxy_set_header     X-ProxyContextPath "";
        proxy_pass           http://127.0.0.1:18080;
    }
}
