server {

  listen 443;
  server_name wac.tryndus.com;
  ssl_certificate /etc/letsencrypt/live/tryndus.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/tryndus.com/privkey.pem;
  ssl on;
  ssl_protocols TLSv1.2;
  ssl_prefer_server_ciphers on;
  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
  ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
  ssl_session_cache shared:SSL:10m;
  ssl_session_tickets off; # Requires nginx >= 1.5.9
  ssl_stapling on; # Requires nginx >= 1.3.7
  ssl_stapling_verify on; # Requires nginx => 1.3.7
  add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";

#  ssl_dhparam /etc/ssl/certs/dhparam.pem;
  location / {

    #auth_basic "Restricted Content";
    #auth_basic_user_file /etc/nginx/.htpasswd;
    proxy_pass http://192.168.1.248/;