Changed user (www:www) to match default user created by package installer (nginx:nginx) on Fedora 20 (yum).
Changed ssl_trusted_certificate to be consistent with other cert references (/etc/nginx/cert/)
Increased staple validity time (60s to 300s)
Increased resolver_timeout (2s to 5s)
Added Diffie Hellman parameter file and command to generate it.
Changed cipher suite to more secure options.
Shortened the ssl_session_timeout to 10 minutes.
Changed default ssl certificate location.