listen              443 ssl;
ssl_certificate     /etc/ssl/tu-dominio.pem
ssl_certificate_key /etc/ssl/private/tu-dominio.key
ssl_protocols       TLSv1.2 TLSv1.3;
ssl_ciphers         HIGH:!aNULL:!MD5;