# SSL Config
    ssl_certificate         /etc/letsencrypt/live/{domain_name}/fullchain.pem;
    ssl_certificate_key     /etc/letsencrypt/live/{domain_name}/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/{domain_name}/fullchain.pem;

    ssl_session_cache shared:SSL:50m;
    ssl_session_timeout 5m;
    ssl_stapling on;
    ssl_stapling_verify on;

    ssl_protocols {ssl_protocols};
    ssl_ciphers "{ssl_ciphers}";

    ssl_prefer_server_ciphers on;

    add_header Strict-Transport-Security "{add_header_hsts}" always;