server {
  listen              443 ssl;
  server_name         PH_SRVNAME;

  ssl_certificate     PH_CRT;
  ssl_certificate_key PH_KEY;

  location / {
    proxy_pass                            http://127.0.0.1:8080;
    add_header Strict-Transport-Security  "max-age=31536000; includeSubDomains";
  }
}