proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Proto $scheme; # Settings for keepalive module for upstreams proxy_http_version 1.1; proxy_set_header Connection ""; # Requests sent with early data are subject to replay attacks so the application needs to protect against that by using the Early-Data header. # proxy_set_header Early-Data $ssl_early_data;