anchor.diff:    <% if @ssl_ca -%>
     ssl_trusted_certificate <%= @ssl_ca %>;
     <% end -%>
  -
     <% end -%>
   
     root   <%= @web_root %>;
  
positive.code:   }
  
    listen 443 ssl http2;
    ssl_protocols TLSv1.2 TLSv1.1 TLSv1; #Turns off TLSv3 to protect against POODLE Attack
    ssl on;
    ssl_prefer_server_ciphers on; # Force server to use ciphers or it will default to browser settings
  
negative.code:   ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off; # Requires nginx >= 1.5.9
    resolver 8.8.8.8 8.8.4.4;
    ssl_stapling on; # Requires nginx >= 1.3.7
    ssl_stapling_verify on; # Requires nginx => 1.3.7
  
  