server {
    listen 10.8.0.1:443 ssl http2;
    #listen [::]:443 ssl http2;
    server_name cr.ins;

    ssl_certificate /etc/nginx/ssl/cr-ins.chain.crt;
    ssl_certificate_key /etc/nginx/ssl/cr-ins.key.pem;

    location / {
        proxy_pass http://10.8.0.1:3891;
    }
}