ssl_certificate  /etc/nginx/certs/localhost.crt;
ssl_certificate_key  /etc/nginx/certs/localhost.key;
ssl_session_timeout  5m;
ssl_prefer_server_ciphers  on;
ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers  AES256+EECDH:AES256+EDH:!aNULL;

proxy_ssl_server_name on;