---
title: "NGINX SSL proxy"
description: "NGINX Home Assistant SSL proxy."
---

Sets up an SSL proxy with NGINX and redirect port 80 to 443. Make sure you have generated a certificate before you start this add-on.

In the `http` section of the `configuration.yaml` file remove `ssl_certificate`, `ssl_key` and `server_port` and don't enter the port in the `base_url` to avoid an HTTP 502 error.

```json
{
  "domain": "home.example.com",
  "certfile": "fullchain.pem",
  "keyfile": "privkey.pem",
  "hsts": "max-age=31536000; includeSubDomains",
  "customize": {
    "active": false,
    "default": "nginx_proxy_default*.conf",
    "servers": "nginx_proxy/*.conf"
  },
  "cloudflare": false
}
```

{% configuration %}
domain:
  description: The Domain to use for the proxy.
  required: true
  type: string
certfile:
  description: The certificate file to use in the `/ssl` directory.
  required: true
  type: string
keyfile:
  description: Private key file to use in the `/ssl` directory.
  required: true
  type: string
hsts:
  description: Value for the [`Strict-Transport-Security`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) HTTP header to send. If empty, the header is not sent.
  required: true
  type: string
customize:
  description: If true, additional NGINX configuration files for the default server and additional servers are read from files in the `/share` directory specified by the `default` and `servers` variables.
  required: false
  type: boolean
  default: false
cloudflare:
  description: If enabled, configure Nginx with a list of IP addresses directly from Cloudflare that will be used for `set_real_ip_from` directive Nginx config.
  required: false
  type: boolean
  default: false
{% endconfiguration %}

<div class='note'>

It is possible to deactivate port 80 if you need this for things like `emulated_hue`. Remove the host port from Network option of this add-on.

</div>