server {
         listen       ;
         server_name xxx.com;
         ssl_certificate        ssl/xxx.pem;
         ssl_certificate_key    ssl/xxx.key;
         ssl_session_timeout 5m;
         ssl_protocols TLSv1 TLSv1. TLSv1.;
         ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
         ssl_prefer_server_ciphers on;
 }