nginx ssl

server {
	listen 80;
	listen [::]:80 ipv6only=on;
	server_name abc.xyz;
	
	# redirect all requests to https
	return 301 https://$server_name$request_uri;
}

server {
	listen 443 default_server ssl;
	listen [::]:443 default_server ssl ipv6only=on;

	server_name abc.xyz;
	
	charset	utf-8;
	
	ssl on;
	ssl_certificate /path/server.crt;
	ssl_certificate_key /path/server.key;

	ssl_stapling on;
	ssl_stapling_verify on;
	ssl_trusted_certificate /path/ca-certs.pem;
	
	# Enforce STS
	add_header Strict-Transport-Security max-age=15768000;
}