default.conf 636 B

123456789101112131415161718192021
  1. server {
  2. listen 443 ssl default;
  3. ssl on;
  4. ssl_certificate ssl/xinyueyouxi.com.pem;
  5. ssl_certificate_key ssl/xinyueyouxi.com.key;
  6. ssl_session_cache shared:SSL:1m;
  7. ssl_session_timeout 5m;
  8. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  9. ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
  10. ssl_prefer_server_ciphers on;
  11. # 禁止IP访问及未绑定的域名跳转
  12. return 403;
  13. }
  14. server {
  15. listen 80 default;
  16. # 禁止IP访问及未绑定的域名跳转
  17. return 403;
  18. }