Ngnix server config

    server {
        listen       80;
        server_name  www.domain.gq domain.gq localhost;

        location / {
	    proxy_pass http://127.0.0.1:32400;
        }
    }
    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name www.domain.gq domain.gq localhost;
            ssl_certificate      /etc/letsencrypt/live/domain.gq/fullchain.pem;
            ssl_certificate_key  /etc/letsencrypt/live/domain.gq/privkey.pem;

            ssl_session_cache shared:SSL:10m;
            ssl_session_timeout 10m;

            ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
            ssl_prefer_server_ciphers on;
            ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384";

            ssl_dhparam /etc/ssl/ffdhe4096.pem;
            ssl_ecdh_curve secp521r1:secp384r1;

            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

            add_header X-Frame-Options DENY always;

            add_header X-Content-Type-Options nosniff always;

            add_header X-Xss-Protection "1; mode=block" always;

            ssl_stapling on;
            ssl_stapling_verify on;
            ssl_trusted_certificate /etc/letsencrypt/live/domain.gq/fullchain.pem;
            resolver 1.1.1.1 1.0.0.1 [2606:4700:4700::1111] [2606:4700:4700::1001] valid=300s;
            resolver_timeout 5s;

            # Required for LE certificate enrollment using certbot
        location '/.well-known/acme-challenge' {
            default_type "text/plain";
            root /var/www/html;
        }
        location / {
            proxy_pass https://127.0.0.1:32400;
        }
    }