ssl on;
ssl_certificate      /etc/letsencrypt/live/{{ domain_name }}/fullchain.pem;
ssl_certificate_key  /etc/letsencrypt/live/{{ domain_name }}/privkey.pem;
ssl_session_cache  builtin:1000  shared:SSL:10m;
ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
ssl_prefer_server_ciphers on;