diff --git a/docs/reverse-proxy.md b/docs/reverse-proxy.md
index 1f66d3c..0809d04 100644
--- a/docs/reverse-proxy.md
+++ b/docs/reverse-proxy.md
@@ -24,6 +24,12 @@ tls_key_path: ""
 The following example configuration can be used in your nginx setup, substituting values as necessary. `<IP:PORT>` should be the IP address and port where headscale is running. In most cases, this will be `http://localhost:8080`.
 
 ```Nginx
+map $http_upgrade $connection_upgrade { 
+    default      keep-alive;
+    'websocket'  upgrade; 
+    ''           close;
+}
+
 server {
     listen 80;
 	listen [::]:80;
@@ -37,12 +43,6 @@ server {
     ssl_certificate_key <PATH_CERT_KEY>;
     ssl_protocols TLSv1.2 TLSv1.3;
 
-    map $http_upgrade $connection_upgrade { 
-        default      keep-alive;
-        'websocket'  upgrade; 
-        ''           close;
-    }
-
     location / {
         proxy_pass http://<IP:PORT>;
         proxy_http_version 1.1;