server { listen 443; server_name www.goforit.com goforit.com; ssl on; ssl_certificate cert/goforit.pem; ssl_certificate_key cert/goforit.key; ssl_sess... ...
server { listen 443; server_name www.goforit.com goforit.com; ssl on; ssl_certificate cert/goforit.pem; ssl_certificate_key cert/goforit.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; if ( $host != 'www.goforit.com' ){ rewrite ^/(.*)$ https://www.goforit.com/$1 permanent; } access_log logs/access_www.log main; location / { root /usr/local/data/www/www; index index.php index.html; } error_page 404 /missing.html; location ~ /\.ht { deny all; } location ~ \.php$ { root /usr/local/data/www/www; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /usr/local/data/www/www$fastcgi_script_name; include fastcgi_params; } }