ssl = on
ssl_cert_file = '/opt/app-root/src/certs/tls.crt' # server certificate
ssl_key_file =  '/opt/app-root/src/certs/tls.key' # server private key
#ssl_ca_file                                   # trusted certificate authorities
#ssl_crl_file                                  # certificates revoked by certificate authorities