server {
        listen 80;
        server_name www.domain.com;
        return 301 $scheme://domain.com$request_uri;
}

server {
        listen 443;
        server_name www.domain.com;

        ssl on;
        ssl_certificate /etc/ssl/localcerts/webserver.pem;
        ssl_certificate_key /etc/ssl/localcerts/webserver.key;

        ssl_session_timeout 5m;

        ssl_protocols SSLv2 SSLv3 TLSv1;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;

        return 301 $scheme://domain.com$request_uri;
}