nginx.conf

user www www;
server_tokens off;
worker_processes 2;
error_log  logs/error.log;
pid        logs/nginx.pid;
 
events {
 worker_connections 768;
}

http {
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;

    include /etc/nginx/mime.types;
    include /etc/nginx/sites-enabled/*;
    default_type application/octet-stream;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    gzip on;
    gzip_disable "msie6";
}

server {
 listen 80;
  server_name .nat.com;
  return 301 https://$host$request_uri;
}

#Really should have this in the sites-available/nat.com folder
server {
  listen 443 ssl default deferred;
  server_name *.nat.com;
  root /www/nat;
  index index.html;
 
  ssl_certificate /etc/nginx/ssl/star_nat_com.crt;
  ssl_certificate_key /etc/nginx/ssl/star_nat_com.key;
  
  ssl_session_cache shared:SSL:50m;
  ssl_session_timeout 5m;
  
  location / {
    try_files $uri $uri/ /index.html;
  }
}