server listen 443 ssl http2; server_name proxy.mycompany.com;
(1–10 Gbps): HAProxy + Varnish cache + automated cert renewal
# Proxy certificate (signed by corporate CA) ssl_certificate /etc/nginx/ssl/proxy.crt; ssl_certificate_key /etc/nginx/ssl/proxy.key;