Good news - you’ve already got it working: https://www.neighborhoodpathways.org/route?point=32.237089%2C-110.898606&point=32.226522%2C-110.93947&debug=false&locale=en&points_encoded=true&instructions=true&elevation=false&optimize=false&profile=pathways1&details=road_class&details=distance
The above link works for me without any errors or SSL certificate warnings.
Your issue was that you were trying to access the HTTP port (port 8989) over HTTPS - this resulting in the protocol error you saw.
Accessing the link above (https://www.neighborhoodpathways.org/route…) uses HTTPS and port 443 (this is the default HTTPS port if you don’t specify one). This is hitting nginx (you can see in your netstat command that nginx is listening on port 443), which then hits the “location /route” rule in nginx’s config and proxies the request back to http://localhost:8989 (which is your local GraphHopper instance).
I’d love to see a write-up of how you got everything working when you’re all done!