Generate certificate via

sudo apt install letsencrypt
sudo letsencrypt certonly -a standalone

Put cert on nginx configuration

server {

        # Running port
        listen 80;
        server_name domain.id;
        # Settings to serve static files
        return 301 https://$server_name$request_uri;
}

server {
        listen 443 ssl http2 default_server;
        ssl_certificate /etc/letsencrypt/live/domain.id/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/domain.id/privkey.pem;
        ssl_session_timeout 1d;
        # ssl_ciphers;
        ssl_protocols TLSv1.2;
        add_header Strict-Transport-Security max-age=15768000;

        location ^~ /static/  {

                # Example:
                # root /full/path/to/application/static/file/dir;
                root /home/sob/development/production/;

        }

        # Proxy connections to the application servers
        location / {

                proxy_pass         http://127.0.0.1:8000;
                proxy_redirect     off;
                proxy_set_header   Host $http_host;
                proxy_set_header   X-Real-IP $remote_addr;
                proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header   X-Forwarded-Host $server_name;

        }
}

Referensi

• https://spencertechconsulting.com/posts/HTTP-TO-HTTPS/