module-nginx/templates/vhost/vhost_ssl_header.erb

server {
  listen       <%= ssl_port %><% if scope.lookupvar('nginx::params::nx_spdy') == 'on' %> ssl spdy<% end %>;
  <% if ipv6_enable == 'true' && (defined? ipaddress6) %>
  listen [<%= ipv6_listen_ip %>]:<%= ipv6_listen_port %> <% if @ipv6_listen_options %><%= ipv6_listen_options %><% end %> ipv6only=on;
  <% end %>
  server_name  <%= rewrite_www_to_non_www ? name.gsub(/^www\./, '') : server_name.join(" ") %>;

  ssl                       on;
  ssl_certificate           <%= ssl_cert %>;
  ssl_certificate_key       <%= ssl_key %>;
  ssl_session_cache         shared:SSL:10m;
  ssl_session_timeout       10m;
  ssl_ciphers               RC4:HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;
  <% if scope.lookupvar('nginx::params::nx_ssl_stapling') == 'on' %>ssl_stapling              on;<% end %>
  <% if scope.lookupvar('nginx::params::nx_spdy') == 'on' %>spdy_headers_comp         1;<% end %>

  <% proxy_set_header.each do |header| %>
  proxy_set_header        <%= header %>;<% end %>