setting ssl

upstream topddl_upstream2 {
    server 127.0.0.1:1338;
    keepalive 64;
}

server {
  listen        80;
  listen 	443 ssl http2;
  server_name   topddl.net www.topddl.net vid.ndha.xyz;
  ssl_certificate /var/www/topddl.net/cert/ndha.xyz.alphassl.crt;
  ssl_certificate_key /var/www/topddl.net/cert/ndha.xyz.alphassl.key;
  ssl_dhparam /var/www/topddl.net/cert/dhparam.pem;
  
  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:20m;
  add_header X-Frame-Options "SAMEORIGIN" always;
  add_header X-Content-Type-Options "nosniff" always;
  add_header X-Xss-Protection "1; mode=block" always;
  ssl_session_tickets on;
  ssl_stapling on;
  ssl_stapling_verify on;
  resolver 8.8.8.8 8.8.4.4 valid=300s;
  resolver_timeout 10s;
  ssl_trusted_certificate /var/www/topddl.net/cert/ndha.xyz.alphassl.trusted.crt;
  include common/cloudflare.conf;
	
    location / {
    proxy_pass                          http://topddl_upstream2;
    proxy_http_version                  1.1;
    proxy_set_header  Connection        "";
    proxy_set_header  Host              $host;
    proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header  X-Real-IP         $remote_addr;
    proxy_redirect off;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-SSL on;
    proxy_max_temp_file_size 0;
    client_max_body_size 10m;
    client_body_buffer_size 128k;
    proxy_connect_timeout 90;
    proxy_send_timeout 90;
    proxy_read_timeout 90;
    proxy_buffer_size 4k;
    proxy_buffers 4 32k;
    proxy_busy_buffers_size 64k;
    proxy_temp_file_write_size 64k;
  }
}