// Only allow secure ciphers
			Sequence<String> ciphers = Sequence.of(
				"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
				"TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
				"TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
				"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384","TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
				"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384","TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384","TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
				"TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA","TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
				"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA","TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
				"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256","TLS_ECDH_RSA_WITH_AES_128_CBC_SHA","TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
				"TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA","TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA","TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
				"TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA");
			
			// Explicitly disable SSLv3 even though it's implied by the allowed cipher list
			Sequence<String> sslProtocols = Sequence.of("TLSv1","TLSv1.1","TLSv1.2");
									
            try {
	        	SSLContext sslContext = createSSLContext(loadKeyStore("server.keystore"), loadKeyStore("server.truststore"));
	        	System.out.println("Keystore found.  HTTP/HTTPS.");

	        	server = Undertow.builder()
			        	.setServerOption(UndertowOptions.ENABLE_HTTP2, true)
			        	.setBufferSize(16 * 1024)
			        	
				        .setSocketOption(Options.BACKLOG, 50000)
				        .setSocketOption(Options.SSL_ENABLED_CIPHER_SUITES, ciphers)
				        .setSocketOption(Options.SSL_ENABLED_PROTOCOLS, sslProtocols)

				        .setServerOption(UndertowOptions.MAX_ENTITY_SIZE, (long)(8 * 1024 * 1024)) 	// max upload size
				        .setServerOption(UndertowOptions.ALWAYS_SET_KEEP_ALIVE, false) //don't send a keep-alive header for HTTP/1.1 requests, as it is not required
				        .setServerOption(UndertowOptions.ALWAYS_SET_DATE, true)
				        .setServerOption(UndertowOptions.ENABLE_CONNECTOR_STATISTICS, false)
				        .setServerOption(UndertowOptions.RECORD_REQUEST_START_TIME, false)	

				        .setWorkerOption(Options.CONNECTION_HIGH_WATER, 1000000)
			        	.setWorkerOption(Options.CONNECTION_LOW_WATER, 1000000)
			        	.setWorkerOption(Options.TCP_NODELAY, true)
			        	.setWorkerOption(Options.CORK, true)

			        	.setWorkerOption(Options.WORKER_IO_THREADS, Runtime.getRuntime().availableProcessors() - 2)
			        	.setWorkerOption(Options.WORKER_TASK_CORE_THREADS, 2)
			        	.setWorkerOption(Options.WORKER_TASK_MAX_THREADS, Runtime.getRuntime().availableProcessors())

			        	.addHttpListener(port, host)
			        	.addHttpsListener(securePort, host, sslContext)	        	
			        	.setHandler(router)
			        	.build();
	        	
	        } catch (Exception e) {

     node.addDependent(i);

     if (i != null) {
          node.addDependent(i);
     }