# Shared HTTPS after stream ssl_preread: restore client IP, hide :8443 in redirects.
set_real_ip_from 127.0.0.1;
set_real_ip_from ::1;
real_ip_header proxy_protocol;
port_in_redirect off;
absolute_redirect off;