ssl-config

server {
  #listening on port 443
  listen 443 ssl;

  #set site root
  root /var/www/HOSTNAME.com;
	index index.php index.html;
  
  #set key locations
  ssl_certificate /etc/sslmate/HOSTNAME.com.chained.crt;
  ssl_certificate_key /etc/sslmate/HOSTNAME.com.key;
  

  #Prevent SSL3 from being used
  ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
  
}