friendica/doc/server-config/sample-nginx-reverse-proxy.config

#
# Example of NGINX as reverse-proxy terminating an HTTPS connection.
#
# This is not a complete NGINX config.
#
# Please refer to NGINX docs
#

# Note provided by Gabe R.: if you are using nginx as proxy server for Apache2
# make sure your nginx config DOES NOT contain the following
# -----
# location ~ /.well-known {
#  allow all;
#  }
# -----
...

server {

	...

	# assuming Friendica runs on port 8080
	location / {
		if ( $scheme != https ) {
			# Force Redirect to HTTPS
			return 302 https://$host$uri;
		}
		proxy_pass http://localhost:8080;
		proxy_redirect off;
		proxy_set_header Host $host;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Forwarded "for=$proxy_add_x_forwarded_for; proto=$scheme";
	}

	...

}