...

sudo apt-get install pound

Configure Pound

Save the certificate pem file in /etc/ssl/private. Give it a meaningful name that relates to the url that it protects.

Edit the pound configuration file:

...

##      2       extended
##      3       Apache-style (common log format)
LogLevel        1

## check backend every X secs:
Alive           30

ListenHTTPS
    Address 0.0.0.0
    Port    443
    Cert    "/etc/ssl/private/hostedmy.phixflowhost.com.pem"
    Client  20
End
Service
    BackEnd
    Address 127.0.0.1
    Port    327698080
    End
End
 

This tells pound to terminate the encryption on any request received on port 443 (using the certificate in /etc/ssl/private/my.host.com.pem) and forward the request unencrypted to port 8080 on the same host (127.0.0.1).

Enable pound

sudo vi /etc/default/pound

Change it from startup=0 to startup=1.

Start the service

sudo /etc/init.d/pound start