Here is the config for the Odoo server itself

the file is stored under the vhosts directory. This varies per distribution. Mine is located in /etc/nginx/vhosts.d

server {

listen 80;

server_name [server.domain.com]; #Domain Name

rewrite ^ https://$http_host$request_uri? permanent; # force redirect http to https

}

server {

listen 443;

ssl on;

ssl_certificate /etc/ssl/servercerts/servercert.pem; # path to your cacert.pem

ssl_certificate_key /etc/ssl/servercerts/serverkey.pem; # path to your privkey.pem

server_name [server.domain.com]; #Domain Name

proxy_set_header X-Forwarded-For $remote_addr;

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

server_tokens off;

location / {

proxy_pass http://127.0.0.1:8069;

proxy_redirect off;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

}

}

I then have an outside Proxy that the outside world can see. This is optional and you can either point it to theOdoo server nginx or directly to the Odoo service at the particular port

server {

listen 80;

server_name [domain.com] www.[domain.com];

access_log /var/log/www/www.[domain.com].access.log;

error_log /var/log/www/www.[domain.com].error.log error;

rewrite ^ https://$http_host$request_uri? permanent; # force redirect http to https

index index.html index.htm;

}

server {

listen 443;

ssl on;

ssl_certificate /etc/ssl/servercerts/[domain.com].chained.crt; # path to your cacert.pem

ssl_certificate_key /etc/ssl/servercerts/[domain.com].key; # path to your privkey.pem

server_name [domain.com] www.[domain.com]; #Domain Name

proxy_set_header X-Forwarded-For $remote_addr;

add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

server_tokens off;

location / {

proxy_pass http[s]://[odoo.internal.com][[:8069]];

proxy_redirect off;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

}

}