diff --git a/nginx.conf b/nginx.conf
index b04a670..f4d0307 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -66,25 +66,44 @@ http {
           proxy_set_header X-Forwarded-Proto $scheme;
         }
     }
-}
-
-stream {
-    # rancher https: passthrough ssl
     server {
-      listen     443;
-      server_name rancher.flowy.live;
+      listen 443;
+      server_name rancher.flowy.live
 
-      proxy_pass rancher:443;
+      location / {
+        proxy_pass https://rancher;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+      }
     }
 
     # k8s api: passthrough grpc/tcp
     server {
-        listen 80;
-        server_name api.flowy.live;
+      listen 80 http2;
+      server_name api.flowy.live;
 
-        proxy_pass localhost:33606;
+      location / {
+        # Replace localhost:50051 with the address and port of your gRPC server
+        # The 'grpc://' prefix is optional; unencrypted gRPC is the default
+        grpc_pass grpc://localhost:50051;
+      }
     }
+    # server {
+    #   listen 443 ssl http2;
+    #   server_name api.flowy.live;
+    #
+    #   ssl_certificate     ssl/cert.pem;
+    #   ssl_certificate_key ssl/key.pem;
+    #
+    #   location / {
+    #     grpc_pass grpcs://localhost:50051;
+    #   }
+    # }
+}
 
+stream {
     # k8s audio relay
     server {
         listen 6000 udp;