add ssl_stapling
prefer AESGCM and FIPS, drop SSLv3
use nginx upstream if there is a version specified
add spdy and hsts for roundcube
Merge pull request #231 from phunehehe/nginx

More SSL and Nginx stuff