Custom SSL keys

server {
    server_name {domain};
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    access_log off;

    ssl_certificate /etc/letsencrypt/live/{domain}/{domain}.crt;
    ssl_certificate_key /etc/letsencrypt/live/{domain}/{domain}.key;

    ssl_protocols TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
    ssl_ecdh_curve secp384r1;
    ssl_session_timeout 24h;
    ssl_session_tickets off;
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 5s;
    ssl_buffer_size 4k;
    add_header Strict-Transport-Security "max-age=31536000";

    ...