But this would not work in this set-up right? Wouldn't the user facing server (in your case Nginx) have to be the one that serves over HTTPS? I'm a bit confuse

But this would not work in this set-up right? Wouldn't the user facing server (in your case Nginx) have to be the one that serves over HTTPS? I'm a bit confused about this package.