https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html