nginx配置aliyun https

server {

    listen 443;

    server_name www.goforit.com goforit.com;

    ssl on;

    ssl_certificate   cert/goforit.pem;

    ssl_certificate_key  cert/goforit.key;

    ssl_session_timeout 5m;

    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    ssl_prefer_server_ciphers on;

    if ( $host != 'www.goforit.com' ){

        rewrite ^/(.*)$ $1 permanent;

    }      

    access_log  logs/access_www.log main;

    location / {

        root /usr/local/data/www/www;

        index index.php index.html;

    }      

    error_page 404 /missing.html;

    location ~ /\.ht {

        deny all;      

    }      

    location ~ \.php$ {

        root            /usr/local/data/www/www;

        fastcgi_pass  127.0.0.1:9000;

        fastcgi_index  index.php;

        fastcgi_param  SCRIPT_FILENAME  /usr/local/data/www/www$fastcgi_script_name;

        include        fastcgi_params;

    }

}