Well, you’ll setup vhost as usally in ”outer” nginx using proxy_pass http://unix:/var/discourse/shared/standalone/nginx.http.sock:; and terminating SSL there of course
Then on app.yml you have to comment out port redirections and lets encrypt and use socket instead.
Restarting nginx and rebuilding Discourse will give you an open forum 
Instructions can be found here too.