server {

        listen ;

        server_name www.domain.cn; #这里改成你的

        ssl on;

        root /home/wwwroot/default; #你的地址

        #下面两个是上面下载的两个文件地址

        ssl_certificate /usr/local/nginx/conf/cert/full_chain.pem;

        ssl_certificate_key /usr/local/nginx/conf/cert/private.key;

        ssl_session_timeout 5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

        ssl_protocols TLSv1 TLSv1. TLSv1.; ssl_prefer_server_ciphers on;

        index index.php index.html index.htm; # 优先解析php文件 # 匹配后缀为php的文件

        location ~ \.php?.*$

        {

          root /home/wwwroot/default; # 设置网站根目录

          fastcgi_pass unix:/tmp/php-cgi.sock;

          fastcgi_index index.php;

          fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;

         include fastcgi_params;

        }

        location /nginx_status

        {

                stub_status on; access_log off;

        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

        {

         expires 30d;

        }

        location ~ .*\.(js|css)?$

        {

          expires 12h;

        }

        location ~ /\.

        {

                deny all;

        }

        access_log /home/wwwlogs/access.log;

}