> Currently our node servers run behind nginx I was going to ask about this, in our current setup Nginx or an F5 in a DMZ handles TLS termination and everythin

> Currently our node servers run behind nginx I was going to ask about this, in our current setup Nginx or an F5 in a DMZ handles TLS termination and everything inside the trusted network is unencrypted. I guess direct termination on the app server would be nice if you don't have a DMZ.