module-nginx/templates/vhost/vhost_ssl_settings.erb

  ssl on;

  ssl_certificate           <%= @ssl_cert %>;
  ssl_certificate_key       <%= @ssl_key %>;
<% if defined? @ssl_client_cert -%>
  ssl_client_certificate    <%= @ssl_client_cert %>;
  ssl_verify_client         <%= @ssl_verify_client %>;
<% end -%>
<% if defined? @ssl_dhparam -%>
  ssl_dhparam               <%= @ssl_dhparam %>;
<% end -%>
  ssl_session_cache         <%= @ssl_cache %>;
  ssl_session_timeout       <%= @ssl_session_timeout %>;
<% if @ssl_session_tickets -%>
  ssl_session_tickets       <%= @ssl_session_tickets %>;
<% end -%>
<% if @ssl_session_ticket_key -%>
  ssl_session_ticket_key    <%= @ssl_session_ticket_key %>;
<% end -%>
<% if @ssl_buffer_size -%>
  ssl_buffer_size           <%= @ssl_buffer_size %>;
<% end -%>
  ssl_protocols             <%= @ssl_protocols %>;
  ssl_ciphers               <%= @ssl_ciphers %>;
  ssl_prefer_server_ciphers on;
<% if @ssl_crl -%>
  ssl_crl                   <%= @ssl_crl %>;
<% end -%>
<%- if instance_variables.any? { |iv| iv.to_s.include? 'ssl_' } -%>
  <%- if @ssl_stapling -%>
  ssl_stapling              on;
  <%- end -%>
  <%- if defined? @ssl_stapling_file -%>
  ssl_stapling_file         <%= @ssl_stapling_file %>;
  <%- end -%>
  <%- if defined? @ssl_stapling_responder -%>
  ssl_stapling_responder    <%= @ssl_stapling_responder %>;
  <%- end -%>
  <%- if @ssl_stapling_verify -%>
  ssl_stapling_verify       on;
  <%- end -%>
  <%- if defined? @ssl_trusted_cert -%>
  ssl_trusted_certificate   <%= @ssl_trusted_cert %>;
  <%- end -%>
<% end -%>