Configuring a reverse proxy and SSL with nginx and Let's Encrypt

In order to avoid all the information between the user's browsers and the Odoo server that is to be sent in clear over the network, it is necessary to use the HTTPS protocol that encrypts the exchanges. Odoo cannot do this natively, and it is necessary to configure a reverse proxy that will handle the encryption and decryption on behalf of the Odoo server. This recipe shows how to use nginx (http://nginx.net) for this. We will also show how to use Let's Encrypt (https://letsencrypt.org) to manage the certificate and renewal if your organisation does not have its own way of getting a signed SSL certificate.