server { listen 443 ssl spdy; server_name localhost; proxy_buffers 8 64k; ssl_certificate /etc/ssl/certs/<%= @certificate %>.pem; ssl_certificate_key /etc/ssl/private/<%= @certificate %>.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3; ssl_ciphers aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:30m; ssl_session_timeout 15m; ssl_stapling on; resolver <%= node[:networking][:nameservers].join(" ") %>; location / { proxy_pass http://127.0.0.1; proxy_set_header X-Forwarded-For $remote_addr; } }