Otherwise it would be best to use the same config as upstream, no ?
* https://github.com/gitlabhq/gitlab-recipes/blob/master/nginx/gitlab-https
* https://github.com/gitlabhq/gitlab-recipes/blob/master/nginx/gitlab