Thanks. It’s very similar to what I have with slight tweaks. I will do some comparing and see what shakes out. It is very strange that removing the api_password in HA still drops me on the sign in page (and doesn’t let me in) if I’m coming from my domain, but all is fine if I bypass NGnix and hit via 192:::8123.
All of the cert stuff works via NGnix as I can inspect and see it all correctly. I used this article to get me going: https://objectpartners.com/2016/05/26/setting-up-nginx-and-ssl-for-home-assistant/