anchor.diff:    server {
       listen   443;
       ssl on;
  -    ssl_certificate /etc/ssl/certs/fr2_admin.crt;
  -    ssl_certificate_key /etc/ssl/private/fr2_admin.key;
  +    ssl_certificate /etc/ssl/certs/<%= @node[:nginx][:ssl_cert_name] %>;
  +    ssl_certificate_key /etc/ssl/private/<%= @node[:nginx][:ssl_cert_key_name] %>;
       
       ssl_protocols SSLv3 TLSv1;
       ssl_ciphers HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3:!ADH:!aNULL:!eNULL:!NULL:!LOW:!EXP:RC4+RSA;
  
positive.code:   server {
      listen 4950;
      ssl on;
      ssl_certificate /etc/ssl/certs/fr2_admin.crt;
      ssl_certificate_key /etc/ssl/private/fr2_admin.key;
  
      ssl_protocols SSLv3 TLSv1;
      ssl_ciphers HIGH:!MEDIUM:!LOW:+TLSv1:!SSLv2:+SSLv3:!ADH:!aNULL:!eNULL:!NULL:!EXP:RC4+RSA;
  
negative.code:     listen <%= @node[:nginx][:listen_port] %>;
      server_name www.<%= @node[:nginx][:host_name] %> <%= @node[:nginx][:host_name] %>;
      
      if ( $host = '<%= @node[:nginx][:host_name] %>' ) {
        # rewrite ^(.*)$ http://www.ofr.gov$1; #someone fat fingered the dns...
        rewrite ^(.*)$ http://www.<%= @node[:nginx][:host_name] %>$1; # $1 contains '/foo', not 'mydomain.com/foo'
      }
      
      # if ( $host = 'www.federalregister.gov' ) {
  