My current nginx configuration is as follows:

specific configuration for (currently two) domains:

server {
    listen 443 ssl;
    server_name studiotv.service.tebusco.lan phpmyadmin.service.tebusco.lan;
    ssl_certificate /home/administrador/nginx-confs/ssl/service.tebusco.lan.crt;
    ssl_certificate_key /home/administrador/nginx-confs/ssl/service.tebusco.lan.key;
    location / {
        proxy_pass http://127.0.0.1:8180;
        proxy_set_header Host $http_host:8180;
    }
}

default configuration for unmatched ssl connections:

server {
    listen 443 default ssl;
    ssl_certificate /home/administrador/nginx-confs/ssl/service.tebusco.lan.crt;
    ssl_certificate_key /home/administrador/nginx-confs/ssl/service.tebusco.lan.key;
    location / {
        return 403;
    }
}

http configuration:

server {
    listen 80;
    rewrite ^ https://$host$request_uri? permanent;
}

The intention is clear:

• Redirect http traffic to https.
• Proxy each https:// call from phpmyadmin.service.tebusco.lan and studiotv.service.tebusco.lan to apache2. This includes passing a host header, which is detected.
• Each unmatched ssl connection must return a 403 in nginx. Does not even reach apache2.

In the apache2 side of the life, I have a default site, and a non-default site which will match studiotv.service.tebusco.lan:

000-default.conf file (available and enabled):

<VirtualHost 127.0.0.1:8180>
    # The ServerName directive sets the request scheme, hostname and port that
    # the server uses to identify itself. This is used when creating
    # redirection URLs. In the context of virtual hosts, the ServerName
    # specifies what hostname must appear in the request's Host: header to
    # match this virtual host. For the default virtual host (this file) this
    # value is not decisive as it is used as a last resort host regardless.
    # However, you must set it for any further virtual host explicitly.

    ServerName localhost
    ServerAdmin webmaster@localhost
    DocumentRoot /var/www/html

    <Directory /var/www/html>
        Order deny,allow
        Require all granted
    </Directory>
</VirtualHost>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

studiotv.conf file (available and enabled):

<VirtualHost *:8180>
    ServerName studiotv.service.tebusco.lan
    ServerAdmin [email protected]
    DocumentRoot /var/www/studiotv

    <Directory /var/www/studiotv/>
        Options -Indexes +FollowSymLinks
        AllowOverride None
        Order deny,allow
        Allow from all
        Require all granted
    </Directory>

    # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
    # error, crit, alert, emerg.
    # It is also possible to configure the loglevel for particular
    # modules, e.g.
    #LogLevel info ssl:warn

    # No usamos ${APACHE_LOG_DIR} sino en su lugar /var/log/<host>
    ErrorLog /var/log/apache2/studiotv/error.log
    CustomLog /var/log/apache2/studiotv/access.log combined
</VirtualHost>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

However, when I hit the browser with http://studiotv.service.tebusco.lan, the default php page is shown instead.

Question: What am I missing? (apache 2.4.7, nginx 1.6.0, ubuntu server 14.04).