nginx配置https访问

user  root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    client_max_body_size 50m;


    sendfile        on;

    keepalive_timeout  65;

   upstream yapi {
       server 127.0.0.1:3000;
   }

    



    server {
          listen     443 ssl;
          server_name yapi.xxx.com;
          ssl_certificate      cert/yapi.xxx.com.pem;  //从阿里域名或者其他域名商下载的
        ssl_certificate_key  cert/yapi.xxx.com.key; //从阿里域名或者其他域名商下载的

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
          keepalive_timeout   70;

          location / {
              proxy_pass http://yapi;
          }
          location ~ /\. {
              deny all;
          } 
    }

     

}