--- --- ssl on; ssl_certificate {{ site.cert-path }}/wildcard-rsa8192.pem; ssl_certificate_key /etc/keys/leaf-rsa8192.key;