server {
        listen       80  default_server;
        server_name  _;
        rewrite ^ https://$http_host$request_uri? permanent;
}

server {
        listen 443 ssl http2 default_server;
        ssl on;
        ssl_certificate /etc/nginx/cacert.pem;        # path to your cacert.pem
        ssl_certificate_key /etc/nginx/privkey.pem;    # path to your privkey.pem
        server_name _;
       # proxy_set_header X-Forwarded-For $remote_addr;
       # add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

        pagespeed on;
	server_name _;
	root /var/www/html;

	index index.php index.html index.htm index.nginx-debian.html ;

	location / {
                try_files $uri $uri/ =404;
	}

	location ~ \.php$ {
	try_files $uri =404;
	fastcgi_pass unix:/var/run/php5-fpm.sock;
	fastcgi_index index.php;
	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
	include fastcgi_params;
        }
}