server {
    listen		443 ssl;
    server_name         {{ domain }} www.{{ domain }};
    ssl_certificate     /etc/nginx/ssl/{{ ssl_certificate }};
    ssl_certificate_key /etc/nginx/ssl/{{ ssl_certificate_key }};
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    access_log		/var/log/nginx/{{ domain }}.access.log;
    error_log		/var/log/nginx/{{ domain }}.error.log;

    location / {
	include proxy_params;
	proxy_pass http://unix:{{ socket }};
    }
}
