added info about reverse proxy configuration

README.md

@@ -42,6 +42,35 @@ This most likely means you are using an older version of MariaDB with the defaul
 If you encouter this problem on any other platform please let us know!
 
 
+## Running behind reverse proxies
+
+For production environments we highly recommend to run `tank` behind an SSL-enabling reverse proxy.
+If the base path for the api endpoints as well as the authentication should be hosted under a sub-directory
+The reverse proxy needs to rewrite the request to be based on `/`. For Nginx the following configuration
+can be used:
+
+```
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name aura.example.com;
+
+    ssl_certificate     /path/to/certificate;
+    ssl_certificate_key /path/to/private-key;
+
+    location /tank/ {
+         proxy_buffering off;
+         proxy_ignore_headers "X-Accel-Buffering";
+         proxy_request_buffering off;
+         proxy_http_version 1.1;
+
+         proxy_pass http://127.0.0.1:8040/;
+    }
+    ## ... other locations ...
+}
+```
+
+
 ## Development
 
 Check out the repository and build the daemon: