Question about SSL and HProxy in front of NGINX load balancers.

Hello folks. :)

I have two Apache web servers behind two NGINX servers that act as load balancers. Their virtual IP is communicating with a HAProxy load balancer and everything works great. Which is sweet !!!

 ---------------NGINX1 |Apache1 HAPROXY|-----|<->Virtual IP |---- ---------------NGINX2 |Apache2 

However, I do not have SSL implemented yet. Where should SSL be "live"? I want the Apache servers to serve content and not to deal with SSL.

Should SSL be "live" on the HAproxy server or in the NGINX servers? I am not sure how I would forward SSL traffic from HAProxy to NGINX servers. This is what throws me off.

Sorry if this question sounds like a noob question but all this is very new to me.