bind to localhost only & nginx config file

[twl-surrogate]

i changed the port to 8085 (tho you could make it whatever you want afterwards) and made a config file for nginx to reverse proxy and allow certbot to give ssl certificates for https

make sure nginx and certbot are installed (you might need to find a special certbot-nginx plugin in the package manager for them to work together

move nginx-example.conf to /etc/nginx/sites-enabled/ (rename it if you want)
run nginx -t to check for errors then restart nginx systemctl restart nginx (or however you restart services)
then run certbot --nginx and follow the steps and it should automatically give you the certificates
optionally put cerbot renew in a cronjob or just run it normally to renew certs when they need it

[twl-surrogate]

i wrote this assuming you were just serving the site without nginx but you are, my bad, but my config file should help with getting ssl