What would the correct SSL configuration be for a Docker image running Nginx on Azure

Question

I'm creating a Dockerfile to run on Azure with Nginx for a static site. All app services that use this Docker image will run with forced redirect to SSL and H2.

How should I configure these values to leverage the SSL settings on my app service in Azure? It's not clear what Azure does behind the scenes when binding SSL to the domain.

    ssl_certificate     /etc/letsencrypt/live/##DOMAIN##/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/##DOMAIN##/privkey.pem;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;

Thanks,

Answer 1

From Azure App Service team: You do not need to worry about SSL configuration on your Docker image because we take care of it upstream. The only thing you need to worry about is if someone is coming over http, redirect them to https using the X-ARR-SSL header at nginx level.

For example,

 if ($http_x_arr_ssl = "") {
   return 301 https://$host$request_uri;
 }