nginx实战之：ssl反向代理

server {
			client_max_body_size 409600M;		#文件大小限制
			listen 443 ssl;
			server_name www.domain.com;
			
			ssl_certificate      *.crt;  #证书路径，支持 crt,pem 类型的证书，不支持 pfx 类型的证书
			ssl_certificate_key  *.key;         #证书key路径

			ssl_session_cache    shared:SSL:1m;
			ssl_session_timeout  5m;

			ssl_ciphers  HIGH:!aNULL:!MD5;
			ssl_prefer_server_ciphers  on;
			
		
		
		location / {
			proxy_pass http://127.0.0.1:8090;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header Host $http_host;
			proxy_set_header X-NginX-Proxy true;
			proxy_set_header X-Forwarded-Proto $scheme;
		}
	}