server {
        listen 443 ssl;
        server_name domain.io;

        ssl on;
        ssl_certificate /srv/ssl/dcert.crt;
        ssl_certificate_key /srv/ssl/domain.io.key;

        ssl_session_timeout 5m;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
        ssl_prefer_server_ciphers on;

        location / {
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header HOST $http_host;
                proxy_set_header X-Forwarded-Proto https;
                proxy_set_header X-NginX-Proxy true;
                proxy_pass http://127.0.0.1:9000;
                proxy_redirect off;
        }
}