I used this in Nginx, maybe you can try it
server {
listen 443 ssl;
server_name hidden.com;
ssl_certificate C:\\nginx-1.27.2\\ssl\\k8saiinpocket.com\\hidden.pem;
ssl_certificate_key C:\\nginx-1.27.2\\ssl\\k8saiinpocket.com\\hidden.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
chunked_transfer_encoding off;
proxy_cache_bypass $http_upgrade;
proxy_ssl_server_name on;
proxy_pass https://ingress_controller/;
proxy_http_version 1.1;
proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-Host $host:$server_port;
proxy_ssl_verify off;
proxy_ssl_session_reuse on;
proxy_read_timeout 900;
}
error_log C:\\nginx-1.27.2\\logs\\k8s_ingress_error.log;
access_log C:\\nginx-1.27.2\\logs\\k8s_ingress_access.log;
}