server {
listen 443 ssl default_server;
ssl_reject_handshake on;
}
server {
listen 443 ssl;
server_name your.domain;
ssl_certificate your.domain.crt;
ssl_certificate_key your.domain.key;