Not sure if you've fixed it yourself, but this was one of the top google results when I was looking. For anyone else looking, here is the nginx config I got to work, just swap <public server name> and <NVR local IP address> for your use case:
server {
# SSL configuration
listen...