1# 使用https
 2server {                                                                      
 3    listen         443 ssl;                                                  
 4    server_name    www.****.com;#域名                          
 5    ssl_certificate      ssl_certs/1_www.****.com_cert.crt;#证书路径      
 6    ssl_certificate_key  ssl_certs/2_www.****.com.key;#key路径              
 7                                                                             
 8    ssl_session_cache    shared:SSL:1m; #储存SSL会话的缓存类型和大小                        
 9    ssl_session_timeout  5m; #会话过期时间                                               
10                                                                             
11    ssl_ciphers  HIGH:!aNULL:!MD5; #为建立安全连接，服务器所允许的密码格式列表                                          
12    ssl_prefer_server_ciphers  on; #依赖SSLv3和TLSv1协议的服务器密码将优先于客户端密码
13                                            
14    location /     {                                                 
15        root     /var/www/;                               
16        index    index.html index.htm index.php;                           
17    }                                                                
18                                                                             
19    location ~ \.php$ {                                                      
20        root           /var/www;                                     
21        fastcgi_pass   127.0.0.1:9000;                                       
22        fastcgi_index  index.php;                                            
23        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;  
24        include        fastcgi_params;                                       
25    }                                                                        
26}
27
28# 将http访问自动跳转到https
29server{                                                     
30  listen 80 www.****.com;                           
31  rewrite ^/(.*)$ https://www.****.com/$1 permanent;  
32}