Interesting.  So I had included the non-ssl server so that folks could register a vhost for both http and https domains.  However, perhaps we should just redirect/force non-ssl requests to ssl?

Thoughts?

Refs:
* http://serverfault.com/questions/250476/how-to-force-or-redirect-to-ssl-in-nginx
* http://www.cyberciti.biz/faq/linux-unix-nginx-redirect-all-http-to-https