Better (should be more secure) SSL nginx options