server { listen 587 ssl; proxy_pass 127.0.0.1:588; ssl_certificate /etc/letsencrypt/live/{YOURDOMAIN.COM}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/{YOURDOMAIN.COM}/privkey.pem; }