Where to put the SSL certificate for https: front or back?

Question

Nginx

Greetings. There is a server, nginx is on the front and proxies requests to the necessary LXC containers. In nginx+php-fpm containers.
It is necessary to transfer all sites to the https scheme. Where is it better to install a certificate and permanently transfer to https: front or back?
Thank you.

Answer 1

To the front. And this is not "better", but the only option. The certificate must be between the user and your server, not between your internal servers. Between servers, it, theoretically, can also be, but this will not help users in any way.

Answer 2

To the front. Then you will also have the opportunity to sniff traffic between the front and back in case of troubleshooting.