Nginx reverse proxy

server {
        listen 80;
        listen [::]:80;
        server_name MY_DOMAIN;
        # enforece https
        return 301 https://$server_name:443$request_uri;
}

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name MY_DOMAIN;

        ssl_certificate /etc/letsencrypt/live/MY_DOMAIN/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/MY_DOMAIN/privkey.pem;

        add_header Strict-Transport-Security "max-age=15552000;includeSubDomains" always;

        root /var/www/;

        location /nextcloud/ {
        # rewrite ^/nextcloud/(.*)$ $1 break;
                proxy_pass http://127.0.0.1:5141/;
                # proxy_redirect http://127.0.0.1:5141/ /nextcloud/;
                proxy_set_header Host MY_DOMAIN;

                # proxy_set_header X-Forwarded-For $remote_addr;

        }

        location /noVNC/ {
                proxy_pass http://127.0.0.1:5142;
        }

        location /shell/ {
                proxy_pass http://127.0.0.1:4200;
        }


        location /files/ {
                return 301 /;
                proxy_pass http://127.0.0.1:5143;
        }

        #location / {
        #       proxy_pass http://127.0.0.1:5143;
        #}
}