```bash -rw-rw-r-- 1 ubuntu ubuntu 4498 Mar 7 10:16 sleepstory.gogao.top_bundle.crt -rw-rw-r-- 1 ubuntu ubuntu 4498 Mar 7 10:16 sleepstory.gogao.top_bundle.pem -rw-rw-r-- 1 ubuntu ubuntu 1144 Mar 7 10:16 sleepstory.gogao.top.csr -rw-rw-r-- 1 ubuntu ubuntu 1700 Mar 7 10:16 sleepstory.gogao.top.key ``` ```bash server { # SSL configuration # listen 443 ssl default_server; listen [::]:443 ssl default_server; # # Note: You should disable gzip for SSL traffic. # See: https://bugs.debian.org/773332 # # Read up on ssl_ciphers to ensure a secure configuration. # See: https://bugs.debian.org/765782 # # Self signed certs generated by the ssl-cert package # Don't use them in a production server! # # include snippets/snakeoil.conf; # root /var/www/html; # Add index.php to the list if you are using PHP # index index.html index.htm index.nginx-debian.html; server_name garden.gogao.top; client_max_body_size 5M; ssl_certificate /opt/certs/www.gogao.top_nginx/www.gogao.top_bundle.crt; #请填写私钥文件的相对路径或绝对路径 ssl_certificate_key /opt/certs/www.gogao.top_nginx/www.gogao.top.key; ssl_session_timeout 5m; #请按照以下协议配置 ssl_protocols TLSv1.2 TLSv1.3; #请按照以下套件配置,配置加密套件,写法遵循 openssl 标准。 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; root /var/www/garden.gogao.top; index index.html; location / { try_files $uri $uri/ =404; } } ```