updated with SSL settings and deferred listeners for NGINX