gitlab.conf

server {
        listen 443 ssl http2;
        server_name gitlab.mydomain.com;
        gzip off;
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
        add_header X-Frame-Options SAMEORIGIN;
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Content-Type-Options nosniff;
        add_header Referrer-Policy "no-referrer";

        ssl_certificate /etc/letsencrypt/live/mydomain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/mydomain.com/privkey.pem;

        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        ssl_protocols TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;
        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_dhparam /etc/ssl/certs/dhparam.pem;
        ssl_ecdh_curve secp384r1;

        location / {
                proxy_set_header  		X-Real-IP  			$remote_addr;
                proxy_set_header        Host            	$host;
                proxy_set_header        X-Forwarded-For 	$proxy_add_x_forwarded_for;
                proxy_set_header        X-Forwarded-Proto 	$scheme;
                proxy_pass 				http://192.168.50.90;
        }
}