server {
	listen 80;
	server_name www.example.com example.com;
	access_log /var/log/nginx/access.log vhost;
	error_log /var/log/nginx/error.log;
	return 301 https://example.com$request_uri;
}

server {
	listen 443 ssl;
	server_name www.example.com;
	access_log /var/log/nginx/access.log vhost;
	error_log /var/log/nginx/error.log;

	ssl_certificate /etc/nginx/certs/example.com.chained.crt;
	ssl_certificate_key /etc/nginx/certs/example.com_private.key;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
	ssl_prefer_server_ciphers on;
	ssl_session_cache shared:SSL:10m;
	add_header Strict-Transport-Security "max-age=31536000";

	return 301 https://example.com$request_uri;
}

server {
	listen 443 ssl;
	server_name example.com;
	access_log /var/log/nginx/access.log vhost;
	error_log /var/log/nginx/error.log;

	ssl_certificate /etc/nginx/certs/example.com.chained.crt;
	ssl_certificate_key /etc/nginx/certs/example.com_private.key;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
	ssl_prefer_server_ciphers on;
	ssl_session_cache shared:SSL:10m;
	add_header Strict-Transport-Security "max-age=31536000";
	location / {
		proxy_pass http://172.18.0.6/;
		proxy_set_header Host $host;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Real-IP $remote_addr;
	}
}