nginx.conf

user  nginx;
worker_processes 1;
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;
events {
    worker_connections 1024;
}
http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile        on;
    keepalive_timeout  7200;

    server {
        listen 80 default_server;
        server_name loon.sci.utah.edu;
	    return 301 https://$server_name$request_uri;
    } 

    server {
        listen 443 ssl;
        server_name loon.sci.utah.edu;
        ssl_certificate     /etc/letsencrypt/live/loon.sci.utah.edu/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/loon.sci.utah.edu/privkey.pem;
        ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;

        location / {
            proxy_pass http://localhost:5000;
            proxy_set_header    Host            $host;
            proxy_set_header    X-Real-IP       $remote_addr;
            proxy_set_header    X-Forwarded-for $remote_addr;
            proxy_read_timeout 3600;
            proxy_send_timeout 3600;
            proxy_connect_timeout 3600;
            port_in_redirect off;
        }
    }
}