added ssl_crt definition to recipe, moved proxy::nginx to the end of the recipe