ssl_ciphers AESGCM+AES128:ALL:-RSA:-SHA1:HIGH:!EDH:!MD5:!RC4:!aNULL;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:4m;
ssl_session_timeout 20m;