ssl_certificate "CERTIFICATE_PATH"; ssl_certificate_key "CERTIFICATE_KEY_PATH"; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on;