server { 

listen 443 ssl; #开启ssl

server_name www.lncs.net;    #设置域名

 index index.php index.html index.htm default.php default.htm default.html; 

root /www/html;

ssl_certificate keys/full_chain.pem;      #证书位置及名称

ssl_certificate_key keys/private.key;

ssl_session_timeout 5m; 

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on; 

}

server {

 listen 80; 

server_name www.lncs.net; 

rewrite ^(.*)$ https://$host$1 permanent;     #80跳转443

}