server { listen 80; server_name zhengyu1992.cn; location / { return 301 https://zhengyu1992.cn$request_uri; } } server { listen 443 ssl; server_name zhengyu1992.cn; client_max_body_size 8192m; ssl_certificate /etc/nginx/certs/zhengyu1992.cn.pem; ssl_certificate_key /etc/nginx/certs/zhengyu1992.cn.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_session_timeout 1d; ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AES128:EECDH+aRSA+AES128:RSA+AES128:EECDH+ECDSA+AES256:EECDH+aRSA+AES256:RSA+AES256:EECDH+ECDSA+3DES:EECDH+aRSA+3DES:RSA+3DES:!MD5; ssl_prefer_server_ciphers on; location /s { proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:18090/wiki/s; } location /wiki { proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:18090; } location /file { proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:10080; } location /{ root /www/www; } error_page 404 /404.html; location = /40x.html { } }