https behind NGINX reverse proxy, connection refused

[lightnin]

Greetings -

I'm trying to setup Subsonic with https using a letsencrypt cert, following the tutorial here:
https://www.linuxbabe.com/ubuntu/instal ... untu-16-04

The nginx configuration in http works fine. However, the https config results in no response.

In both, I'm running subsonic with the following:
SUBSONIC_ARGS="--port=4040 --max-memory=200"

Though I have tried with https=4443, but that doesn't work. Whenever I am using the https config, the redirect function for https works, but the connection is refused (and the browser reports no cert information.)

Help and suggestions appreciated!

PRETTY_NAME="Raspbian GNU/Linux 9 (stretch)"
Nginx config: (without customization for my domain)
server {
listen 80;
server_name subsonic.your-domain.com;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
server_name subsonic.your-domain.com;

ssl_protocols TLSv1.1 TLSv1.2;
ssl_certificate /etc/letsencrypt/live/subsonic.your-domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/subsonic.your-domain.com/privkey.pem;

location / {
proxy_pass http://127.0.0.1:4040;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect http:// https://;
}

location ~ /.well-known/acme-challenge {
root /var/www/subsonic/;
allow all;
}
}

[lightnin]

It's often something simple.
I had been forwarding port 80 through the router, but didn't realize that I needed to add a forward rule for https, 443, as well. Otherwise nginx 301 redirects incoming requests on port 80 straight to 443, which is not open, so it doesn't work. Doh.