nginx ssl 配置

#user nobody;
worker_processes 1;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;

events {
worker_connections 1024;
}

http {
include mime.types;
default_type application/octet-stream;

#log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
#                  '$status $body_bytes_sent "$http_referer" '
#                  '"$http_user_agent" "$http_x_forwarded_for"';

#access_log  logs/access.log  main;

sendfile on;

#tcp_nopush     on;

#keepalive_timeout  0;
keepalive_timeout  65;

#gzip  on;

server {
    listen       80;
    server_name  www.***.com;
	rewrite ^(.*)$ https://$server_name$1 permanent;    #将所有http请求通过rewrite重定向到https。
    location / {
		proxy_connect_timeout 600s;
        proxy_send_timeout 600s;
        proxy_read_timeout 600s;
        proxy_pass http://39.**.***.250:8888;
  }
  
}

server {
    listen       443 ssl  default_server;
    server_name   www.***.com;
	ssl        on;
    ssl_certificate      /usr/local/nginx/conf/cert/********.pem;
    ssl_certificate_key  /usr/local/nginx/conf/cert/***********.key;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
	ssl_prefer_server_ciphers on;
	  location / {
		proxy_connect_timeout 600s;
        proxy_send_timeout 600s;
        proxy_read_timeout 600s;
		proxy_pass http://************:8888;
		}
	  location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
          proxy_pass http://*******:8888;
        }
      location ~ .*\.(js|css|map)$ {
          proxy_pass http://****:8888;
        }

}
# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
#    listen       8000;
#    listen       somename:8080;
#    server_name  somename  alias  another.alias;

#    location / {
#        root   html;
#        index  index.html index.htm;
#    }
#}


# HTTPS server

}