location /vpn {  #与 no-auto-tls INFO 路径path
    proxy_pass       http://127.0.0.1:8844;   # 与no-auto-tls INFO端口一致
    proxy_redirect             off;
    proxy_http_version         1.1;
    proxy_set_header Upgrade   $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host      $http_host;
       }

感谢233boy脚本

PS：目前NGINX无法转发HTTP 2.0流量，不要白费力气