nginx.conf

server {
    listen 80;
    server_name [example.com];
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name [example.com];

    ssl on;
    ssl_certificate /home/pi/.synapse/certs/[example.com].cert.pem;
    ssl_certificate_key /home/pi/.synapse/certs/[example.com].privkey.pem;

    location / {
        proxy_pass http://localhost:8008;
        proxy_set_header X-Forwarded-For $remote_addr;
    }
}