server {
    listen 443;

    server_name redacted;

    ssl on;
       ssl_certificate /etc/letsencrypt/live/redacted/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/redacted/privkey.pem;

       ssl_session_timeout 5m;

       ssl_protocols TLSv1.2;
       ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
       ssl_prefer_server_ciphers on;

    location / {
        proxy_pass http://192.168.1.64:8080;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        access_log off;
    }
}