I am planning to add a Nginx server as reverse proxy for my current HTTPS Node server. Is it required for Node to still listen for HTTPS or is it OK to listen for HTTP since the server to user HTTPS will be managed from Nginx ?

In short :

• For Nginx : it will be listening port 443 for HTTPS and use the required certificates, then redirect to port 3000 Node.

• For Node : I plan to remove HTTPS listening on port 443 then add a HTTP listening on port 3000.

Is it the right way ? If yes, how can I prevent the outer world from directly reaching the Node HTTP on port 3000 ?