(ssl) first record does not look like a TLS handshake

[Mirron]

Hi guys,
I just installed my Let's Encypt cert and allowed my sinusbot user to accses the /letsencrypt/live/domain/ folder and copy pasta the nginx config like in the documentation.
Now the probem. If i startup my bot no Errors are shown that the bot can't accses the cert file or anything else. now i try to connenct with https://www.mydomain.com:8087 but boom no TLS handshake. i post my nginx config and my sinusbot conf. maybe someone of you can help me.

TS3Path = "/opt/sinusbot/TeamSpeak3-Client-linux_amd64/ts3client_linux_amd64"
ListenHost = "127.0.0.1"
DataDir = "/opt/sinusbot/data/"
ListenPort = 8087
LocalPlayback = false
EnableLocalFS = false
MaxBulkOperations = 300
LogLevel = 3
EnableProfiler = false
YoutubeDLPath = "/opt/sinusbot/youtube-dl"
EnableDebugConsole = false
AllowStreamPush = false
UploadLimit = 83886080
RunAsUser = 0
RunAsGroup = 0
ExternalFileBase = ""
InstanceActionLimit = 6
UseSSL = true
SSLKeyFile = "/etc/letsencrypt/live/www.mydomain.com/privkey.pem"
SSLCertFile = "/etc/letsencrypt/live/www.mydomain.com/fullchain.pem"
Hostname = "www.mydomain.com"
HostnameMask = ""
SampleInterval = 60
StartVNC = false
EnableWebStream = false
LogFile = ""
LicenseKey = ""
IsProxied = true
DenyStreamURLs = []
Pragma = 0
UserAgent = ""

[YoutubeDL]
  BufferSize = 524288
  MaxDownloadSize = 419430400
  MaxDownloadRate = 104857600
  MaxSimultaneousChunkDownloads = 6
  CacheStreamed = false
  TimeoutSingleDownloader = 0
  TimeoutMultiDownloader = 0
  ChunkSize = 3145728

[TS3]
  AvatarMaxWidth = 0
  AvatarMaxHeight = 0
  AllowGIF = true

[StreamRewrites]

[Scripts]
  Debug = false
  AllowReload = false
  EnableTimer = false
  DisableLegacyEvents = false
  DevMode = false
  ScriptTimeout = 5

[Themes]
  Default = ""

[SpeechRecognition]
  Enable = false

[FFmpeg]
  UserAgent = "SinusBot (1.0.0-beta.5-b262b6a)"
  WaitTime = 0

[DAV]
  Enable = false

[XServer]
  Delay = 0
  Debug = false

[SHMem]
  Enable = false
  Size = 0
  Delay = 0
  Interval = 0

[RadioStations]
  URL = ""
  UpdateInterval = 0

server {
    listen 80;
    listen [::]:80;

    # Set your domain here:
    server_name www.mydomain.com;

    access_log /var/log/nginx/sinusbot.access.log;
    error_log  /var/log/nginx/sinusbot.error.log;

    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    # Set your domain here:
    server_name www.mydomain.com;

    client_max_body_size 200M;

    access_log /var/log/nginx/sinusbot.access.log;
    error_log  /var/log/nginx/sinusbot.error.log;

    # Set the path to your ssl cert here:
    ssl on;
    ssl_certificate     /etc/letsencrypt/live/www.mydomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/www.mydomain.com/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:8087;
        proxy_http_version 1.0;
        proxy_set_header X-Forwarded-For $remote_addr;

        # pass upgrade/connection headers for websockets
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
    }
}

 

[Multivitamin]

Either use an SSL Proxy or only the sinusbot internal SSL function via config.ini, but not both!

 

[Mirron]

so if i set UseSSL on true i dont need any reverse proxy in my nginx/sides-available/ folder?