Subdomain for Immich using Tailscale and Nginx

# /etc/nginx/conf.d/immich.conf
server {
  listen 80;
  server_name photos.mydomain.com;

  location / {
    proxy_pass http://localhost:2283/;
    include /etc/nginx/conf.d/proxy_headers.conf;
  }
}

server {
  listen 80;
  server_name power-tools.mydomain.com;

  location / {
    proxy_pass http://localhost:8001/;
    include /etc/nginx/conf.d/proxy_headers.conf;
  }
}

# /etc/nginx/conf.d/proxy_headers.conf;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

* Connected to photos.mydomain.com (0000:0000:0::000) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to photos.mydomain.com:443 
* Closing connection
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to photos.mydomain.com:443