---
---

ssl_session_timeout 5m;

ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers '3DES:!aNULL:!eNULL:!EXPORT:!DES:!CBC:!RC4:!MD5:!PSK';
ssl_prefer_server_ciphers on;