Nginx configuration - SSL terminating reverse proxy to Glassfish v3

nginx.conf

#user  nobody;
worker_processes  1;

error_log  logs/error.log;
pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;
	
	proxy_buffer_size   128k;
	proxy_buffers   4 256k;
	proxy_busy_buffers_size   256k;
	
	proxy_hide_header X-Powered-By;
	
	client_max_body_size 20M;
	
	server_tokens off;
	
	server {
		server_name _;
		listen 80;
		return 301 https://$host$request_uri;
	}
	
	server {
		server_name _;
		listen 443;
	
		ssl on;
		ssl_certificate      cert.pem;
		ssl_certificate_key  cert.key;
	
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:AES128-GCM-SHA256:HIGH:!RC4:!MD5:!aNULL:!EDH:!CAMELLIA;
		ssl_prefer_server_ciphers on;
	
		ssl_session_cache    shared:SSL:10m;
		ssl_session_timeout  10m;
	
		ssl_session_tickets off;
		ssl_stapling on;
		ssl_stapling_verify on;
	
		add_header Strict-Transport-Security max-age=15638400;
		add_header X-Frame-Options DENY;
		add_header X-Content-Type-Options nosniff;
	
		proxy_set_header Host       $http_host;
		proxy_set_header X-Real-IP  $remote_addr;
	
		location / {
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header Proxy-ip $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
			proxy_redirect http:// https://;
        		proxy_pass http://localhost:8080;
    		}
	}
}