ISPConfig behind a reverse proxy in nginx

Hello!
My hosting provider blocks HTTP access through the VPS hostname. So I decided to run ISPConfig through a reverse proxy.
This is the /etc/nginx/sites-enabled/000-ispconfig.domain.tld.vhost file I created:

Code:

server {
    listen 80;

    server_name ispconfig.domain.tld;

    location / {
        proxy_pass https://server1.example.com:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

As you can see, it doesn't have SSL. I have experience with Certbot, but I've never used acme.sh from the terminal.
I would like someone with experience to show me how to install the SSL certificate with acme.sh on this virtual host.
And I also accept other tips on how to configure this virtual host.
Thank you in advance!

 

ISPConfig normally run on https via port 8080, so I do not think reverse proxy is needed simply because you want https. If you set your hostname correctly, you simply access it via https://ispconfig.domain.tld:8080.

And we do not use acme.sh manually to create the certs for the host, however, if there is none set for the host yet, simply run:

Code:

ispconfig_update.sh --force

and let it create new LE SSL certificates for the host and extend it to other services in it.

 

As mentioned, my provider blocks HTTP access through the VPS hostname.
And ISPConfig runs, by default, on the subdomain with the VPS hostname. That's why I can't access it.

I want to create a reverse proxy so I can access ISPConfig on another domain.

I've already started this, using the example code I showed.

I need help configuring SSL on this virtual host.

 

You say your provider blocks the vps hostname.
What about connecting to the vps ip?

If that works then create a new website in ISPC.
For example panel.domain.tld (don't use your vps hostname!)
Proxy the new website to ISPC and enable ssl.

 

Based on several of my experiences, default vps hostname can always be changed to our preferred ISPConfig hostname, but one may need to consult the vps provider on how to achieve that.

ISPConfig tutorials specifically have such a guide i.e. to set / change hostname.

In any event, I do not know yours, or whether you have consulted them, so you may be right and the reverse proxy may be the only way / solution for you.