nginx/portainer

server {
        listen 443 ssl http2;

        root /config/www;
        index index.html index.htm index.php;

        server_name portainer.DIT_DOMAIN.duckdns.org;

        client_max_body_size 0;

        ssl_certificate /etc/letsencrypt/live/portainer.DIT_DOMAIN.duckdns.org/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/portainer.DIT_DOMAIN.duckdns.org/privkey.pem;
        ssl_protocols TLSv1.1 TLSv1.2;
        ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
        add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
        ssl_prefer_server_ciphers on;

        location / {
                proxy_pass http://portainer/;
                proxy_http_version 1.1;
                proxy_set_header Connection "";
        }

        location /api/websocket/ {
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_http_version 1.1;
                proxy_pass http://portainer/api/websocket/;
        }
}