Stick to KISS. Removed completely copy certificates logic and assigned directly user supplied paths to nginx config keys.
Using @ssl_* instead of scope lookup.
typo
added root to ssl template