server {
    listen  80;
    server_name xxx.xxx.com;

    rewrite ^(.*)$  https://$host$1 permanent;
}

server {
    listen       443 ssl;
    server_name  xxx.xxx.com;

    ssl_certificate      /opt/nginx/ssl/xxxxx.pem;
    ssl_certificate_key  /opt/nginx/ssl/xxxxx.key;

    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;

    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers  on;
    
    underscores_in_headers on; 

   location ~ /demo {

        proxy_set_header   Host             xxx.xxx.com;

        proxy_set_header   X-Real-IP        $http_x_forwarded_for;

        proxy_set_header   X-Forwarded-For  $http_x_forwarded_for;

        proxy_pass                          http://xxx.service;

    }
}