server {
   listen 80 default_server;

   # other config

   # gzip on
   gzip on;
   gzip_min_length 1024;
   gzip_buffers 4 32k;
   gzip_types text/plain application/x-javascript text/xml text/css;
   gzip_vary on;
}

server {
   listen 443 ssl;

   # ssl
   ssl on;
   ssl_certificate /opt/ssl/example.com.crt;
   ssl_certificate_key /opt/ssl/example.com.key;
   ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
   ssl_ciphers RC4:HIGH:!aNULL:!MD5;
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;
   ssl_session_timeout 10m;
   ssl_stapling on;
   ssl_stapling_verify on;
   ssl_trusted_certificate /opt/ssl/startssl-ca-certs.pem;

   # other config

   # gzip on
   gzip on;
   gzip_min_length 1024;
   gzip_buffers 4 32k;
   gzip_types text/plain application/x-javascript text/xml text/css;
   gzip_vary on;
}