case/nginx- ssl证书配置demo.conf at master · hlf2016/case · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
server
    {
        listen 443;
        server_name www.stpaulsfriends.club;
        index index.html index.htm index.php;
        root  /home/www/us.m9n.com;
        ssl on;
        ssl_certificate   ssl/www.stpaulsfriends.club.pem;
        ssl_certificate_key  ssl/www.stpaulsfriends.club.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        include proxy-pass-php.conf;

        location ~ \.php {
            fastcgi_pass unix:/tmp/php-cgi.sock;
            fastcgi_index /index.php;
            fastcgi_split_path_info       ^(.+\.php)(/.+)$;
            fastcgi_param PATH_INFO       $fastcgi_path_info;
            fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include                       fastcgi_params;
        }


        location /nginx_status
        {
            stub_status on;
            access_log   off;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /home/wwwlogs/access.log;

     }