server {
  listen 443;

  server_name @@host@@;
  access_log /var/log/nginx/@@host@@.log;
  error_log /var/log/nginx/@@host@@.log;

  ssl on;
  ssl_certificate /etc/nginx/ssl/cert.crt;
  ssl_certificate_key /etc/nginx/ssl/key.key;
  ssl_client_certificate /etc/nginx/ssl/intermediate.crt;

  ssl_session_timeout 5m;
  ssl_protocols  SSLv2 SSLv3 TLSv1;
  ssl_ciphers  HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers   on;

  location / {
	proxy_redirect off;

  	proxy_set_header X-Real-IP		$remote_addr;
  	proxy_set_header X-Forwarded-For	$proxy_add_x_forwarded_for;
  	proxy_set_header X-Forwarded-Proto	$scheme;
  	proxy_set_header Host			$http_host;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
  	
	proxy_http_version 1.1;
  	
	proxy_pass         http://127.0.0.1:8080;
	
	proxy_intercept_errors on;
  }
}