nginx-ssl

nginx ssl

80

nginx.conf

server {
	listen 80;
	server_name domain.com;
	rewrite ^/(.*)$ https://domain.com:443/$1 permanent;
}

443

nginx.conf

server {
	listen 443 ssl;
	server_name domain.com;
	ssl_certificate /etc/ssl/1_domain.com_bundle.crt;
	ssl_certificate_key /etc/ssl/2_domain.com.key;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
	ssl_prefer_server_ciphers on;
	location / {
		root /home/public;
		index index.html index.htm;
	}
}