## 配置这个监听80端口的意义是请求转发,如果用户使用http访问,自动转到https
server {
  listen       80;
  server_name  localhost;
  location / {
    client_max_body_size    1000m;
    proxy_set_header HOST \$host;
    proxy_set_header X-Forwarded-Proto \$scheme;
    proxy_set_header X-Real-IP \$remote_addr;
    proxy_set_header X-Forwarded-For \$remote_addr;
    rewrite ^(.*)$ https://\$host\$1 permanent;
  }       
}

server {
 listen 443;
 ssl on;
 server_name www.junpzx.cn;
 location / {
        client_max_body_size    1000m;
        proxy_pass http://halo:8090;
        proxy_set_header HOST \$host;
        proxy_set_header X-Forwarded-Proto \$scheme;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$remote_addr;
  }
  ssl_certificate  /var/cert/junpzx-www.pem;
  ssl_certificate_key  /var/cert/junpzx-www.key;
  ssl_session_cache  shared:SSL:1m;
  ssl_session_timeout  5m;
  ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers  on;
}