nginx配置https方法

nginx配置https

        listen       443 ssl http2;
        ssl_certificate  /opt/nginx-proxy/etc/ssl/aqzt.com.pem;
        ssl_certificate_key  /opt/nginx-proxy/etc/ssl/aqzt.com.key;
        ssl_session_timeout  5m;
        ssl_dhparam          /opt/nginx-proxy/etc/ssl/aqzt.com_dh.pem;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
        ssl_session_cache          shared:SSL:50m;
        ssl_prefer_server_ciphers  on;
        ssl_session_tickets        on;
        ssl_session_ticket_key     /opt/nginx-proxy/etc/ssl/aqzt.com_st.key;



        openssl dhparam -out aqzt.com_dh.pem 2048


        openssl rand 48 > aqzt.com_st.key