move ssl config to a seperate file
remove SSLv3 from the ssl protocol list

As suggested in #44, and since h5bp doesn't support IE6 it seems to be
appropriate to remove a protocol which is in the list only to permit use
with IE6.
turn off ssl session tickets

Stolen from istlsfastyet.com's config

It is probably a more logical default to turn off session tickets
given the diff linked in the comment block.
add increased ssl timeout
Default to use HTTP strict transport security
add stubs for ssl-stapling and spdy
disable ssl_session_tickets

it's only recently added so is a config error otherwise
don't include ssl config by default

If the server has no ssl config - there's no need to load a config file
full of ssl config
add ssl example site

ensure to avoid any use of if as that's "extremely inefficient" and
eliminate redirects where possible
use a much longer ssl_session_timeout

To match the settiongs from istlsfastyet.com

Add a mention of ssl_buffer_size even though it can 't be enabled yet
Merge branch 'feature/split-ssl'

Add ssl config from istlsfastyet.com

Some doc changes needed, but this includes all of the config changes

Closes #44