You can use 'https' in proxy pass eg: location @proxy { proxy_pass https://www.acme.eu; } If you define your backends via upstream {} add also :443 port there. It is kinda overhead to talk to backends via SSL but it's possible. rr