title: Details about how Nginx work with SSL on Google compute engine
body: <p>I have successfully deployed my spring boot app to Compute Engine on ubuntu 18.04, it is behind Nginx proxy but currently Nginx is listening to 80 port, which is http. I need to set up secure connection. I have question about few details, im new to this, all i've done so far is write spring boot/react js apps on windows, in IDE. </p>
  
  <ol>
  <li>Is it <strong>necessary</strong> to buy a domain for my compute engine or I can just make SSL for the <strong>external ip</strong> of compute engine ? On compute
  engine only the back end rest api is deployed, the front end is on
  Netlify and it's already working. I don't need a good sounding
  domain name for back end because user won't see it, only front end
  app will use the <strong>external ip</strong> of my compute engine to fetch data
  from back end.</li>
  <li>I have seen guides that set up SSL in the setting of Nginx, why is that ? Isn't the request first coming to the compute engine's <strong>external ip</strong> and only after that to Nginx ? Isn't it the job of compute engine to do secure connection by sending public key&amp;certificate to front end and <strong>only then</strong> relay the request to Nginx ? Or does compute engine simply relay the https request that comes to it to Nginx right away, without securing it/doing any key&amp;certificate sending ? </li>
  </ol>
  
  <p>You can give some advice if you have any, i'm just trying to make a secure connection to my back end spring boot app which is behind Nginx on google compute engine, which currently works only with HTTP but not HTTPs.</p>