diff --git a/nifi/nginx.conf b/nifi/nginx.conf
new file mode 100644
index 0000000..1516bc4
--- /dev/null
+++ b/nifi/nginx.conf
@@ -0,0 +1,21 @@
+server {
+    listen               80;
+    server_name          nifi.example.com;
+    return               301 https://$host$request_uri;
+}
+
+server {
+    listen               443 ssl;
+    server_name          nifi.example.com;
+    ssl_certificate      ssl/example/example.com.crt;
+    ssl_certificate_key  ssl/example/example.com.key;
+    ssl_protocols        TLSv1 TLSv1.1 TLSv1.2;
+    ssl_ciphers          HIGH:!aNULL:!MD5;
+    location / {
+        proxy_set_header X-ProxyScheme https;
+        proxy_set_header X-ProxyHost $host;
+        proxy_set_header X-ProxyPort 443;
+        proxy_set_header X-ProxyContextPath /;
+        proxy_pass       http://127.0.0.1:8080;
+    }
+}