manual ssl handler edit

nginx_user_conf.d/server.conf

@@ -1,9 +1,23 @@
 server {
     listen 80;
+    server_name demo.networkwizard.xyz;
+
+    # Optional: Redirect HTTP to HTTPS (access via external port 8008 redirects to 4433)
+    location / {
+        return 301 https://$host:4433$request_uri;
+    }
+}
+
+server {
     listen 443 ssl;
     server_name demo.networkwizard.xyz;
 
-    # SSL config handled by the container image
+    ssl_certificate /etc/nginx/ssl/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+
+    # Optional: Enhance security
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
 
     location / {
         proxy_pass http://app:5000;
@@ -12,6 +26,4 @@ server {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
-
-    # Redirect HTTP to HTTPS (handled automatically by the image after certs are obtained)
 }