You could cut out a chunk of configuration by using Caddy web server (https://caddyserver.com/) instead of Nginx.

Configuration is very simple (for example, reverse proxying is just three lines - for the entire config!), and SSL works out of the box!