+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
+ ssl_ciphers aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5;
+ ssl_prefer_server_ciphers on;
+ ssl_session_cache shared:SSL:30m;
+ ssl_session_timeout 15m;
+ ssl_stapling on;
+ resolver <%= @resolvers.join(" ") %>;