What have I done wrong here?

I think you haven’t changed the configuration of ssl inside nginx.conf. Rest can be detect by logs.