These days I had to deploy several web apps, like [Jenkins](https://jenkins-ci.org/) or [jupyter](http://jupyter.org/). These apps *must* be served through HTTPS.

I was wondering if it's better to configure HTTPS on each app (listening port, ssl certificates, etc.) or to run the default configuration and force HTTPS with a reverse proxy like [nginx](http://nginx.org/).

I feel that the second solution is more practical, but maybe I'm missing something from the security point of view.