nginx常见配置ssl

    server {
        listen       443 ssl;
        server_name  www.xxx.com;

        #config
        include mime.types;
        default_type application/octet-stream;

        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';

        #access_log  logs/access.log  main;
        sendfile on;
        #tcp_nopush     on;

        #keepalive_timeout  0;
        keepalive_timeout 65;
        client_max_body_size 10m;
        gzip on;
        gzip_min_length 5k;
        gzip_buffers 4 16k;
        gzip_http_version 1.0;
        gzip_comp_level 4;
        gzip_types text/plain application/x-javascript application/javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
        gzip_vary on;
        #config

        ssl_certificate      cert/xxx.pem;
        ssl_certificate_key  cert/xxx.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        #ssl_prefer_server_ciphers on;

        location / {
            root   D:\xxx\dist;
            index  index.html index.htm;
            #解决页面刷新404问题
            try_files $uri $uri/ /index.html;
        }

        location / {        
            proxy_pass http://xxx;
            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;                       
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            proxy_read_timeout   3600s;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
    }