write full nginx.conf instead of patching
as per http://crosbymichael.com/dockerfile-best-practices-take-2.html don't upgrade
remove commented stuff
remove sites-enabled from volume
now rm default works
reset CMD
expose ssl port
add ssl to site config
attach ssl cert/key directory as volume
add comments