title: Is HTTPS behind reverse proxy needed?
body: <p>I have an API server running behind an nginx reverse proxy. It is important to have all requests to my API server be secured via TLS since it handles sensitive data.</p>
  
  <p>I've setup nginx to work with TLS (LetsEncrypt) so that seems to be okay. However, requests from nginx to my API server are still insecure <code>http</code> requests (this is all happening across docker containers, by the way).</p>
  
  <p>Is it a best practice to also setup https between the reverse proxy and the API server? If so, how would I go about doing that without over-engineering it?</p>