| server { |
| listen 443 <%= default_server %>; |
| server_name <%= server_name %>; |
| |
| access_log /var/log/nginx/eplite.access.log; |
| error_log /var/log/nginx/eplite.error.log; |
| |
| ssl on; |
| ssl_certificate /etc/nginx/ssl/eplite.crt; |
| ssl_certificate_key /etc/nginx/ssl/eplite.key; |
| |
| ssl_session_timeout 5m; |
| |
| ssl_protocols SSLv2 SSLv3 TLSv1; |
| ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; |
| ssl_prefer_server_ciphers on; |
| |
| location / { |
| proxy_pass http://localhost:9001/; |
| proxy_set_header Host $host; |
| proxy_buffering off; |
| } |
| } |
| |
| server { |
| listen 80 <%= default_server %>; |
| server_name <%= server_name %>; |
| rewrite ^(.*) https://$server_name$1 permanent; |
| } |