server { listen 443 ssl; server_name localhost; ssl_certificate /etc/ssl/certs/tile.openstreetmap.pem; ssl_certificate_key /etc/ssl/private/tile.openstreetmap.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; location / { proxy_pass http://127.0.0.1; } }