配置https

server
{
    listen 443;
    server_name demo.com;

    ssl_certificate /path/cert/demo.com_bundle.crt;
    ssl_certificate_key path/cert/demo.com.key;

    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
      {
         expires      30d;
      }

    location ~ .*\.(js|css)?$
    {
       expires      12h;
    }

}