server {
    listen 443 ssl default_server;
    server_name _;

    ssl_certificate /etc/nginx/tls/server.crt;
    ssl_certificate_key /etc/nginx/tls/server.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers 'AES128-SHA:@SECLEVEL=0';

    root /var/www/html;
    index index.html;
}