server { listen 443 ssl spdy; server_name localhost; proxy_buffers 8 64k; ssl_certificate /etc/ssl/certs/<%= @certificate %>.pem; ssl_certificate_key /etc/ssl/private/<%= @certificate %>.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers <%= node[:ssl][:ciphers] -%>; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:30m; ssl_session_timeout 15m; ssl_stapling on; ssl_dhparam /etc/ssl/certs/dhparam.pem; resolver <%= @resolvers.join(" ") %>; location / { proxy_pass http://127.0.0.1; proxy_set_header X-Forwarded-For $remote_addr; } }