1. 申请或者制作证书
    2. 配置证书内容 ```nginx user nginx; worker_processes 1;

    error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid;

    events { worker_connections 102400; }

    http { include /etc/nginx/mime.types; default_type application/octet-stream;

    1. #设置允许发布内容60M
    2. client_max_body_size 60M;
    3. client_body_buffer_size 128k;
    5. log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    6.                   '$status $body_bytes_sent "$http_referer" '
    7.                   '"$http_user_agent" "$http_x_forwarded_for"';
    9. access_log  /var/log/nginx/access.log  main;
    11. sendfile        on;
    12. #tcp_nopush     on;
    14. #keepalive_timeout  65;
    15. keepalive_timeout  600s;
    16. keepalive_requests 10000;
    20. server {
    21.       listen 443 ssl;   #SSL协议访问端口号为443。此处如未添加ssl，可能会造成Nginx无法启动。
    22.         server_name kefu.xiaochiai.com;  #将localhost修改为您证书绑定的域名，例如：www.example.com。
    23.     ssl on;
    25.         ssl_certificate /etc/nginx/conf.ssl/domain.pem;   #将domain name.pem替换成您证书的文件名。
    26.         ssl_certificate_key /etc/nginx/conf.ssl/domain.key;   #将domain name.key替换成您证书的密钥文件名。
    28.         ssl_session_timeout 5m;
    29.         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
    31.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
    32.         ssl_prefer_server_ciphers on;   
    35.    location /socket.io {
    36.       proxy_pass http://xx:9081;    
    38.        proxy_set_header Host $host:$server_port;
    39.        proxy_set_header X-Forwarded-For $remote_addr;
    40.        proxy_set_header X-Forwarded-Proto $scheme;
    41.        proxy_http_version 1.1;
    42.        add_header backendIP $upstream_addr;
    43.        add_header backendCode $upstream_status;
    44.        proxy_set_header Connection "";
    45.    }
    46. }                 
    54. server {
    56.     # 配置DNS解析IP地址，比如 Google Public DNS，以及超时时间（5秒） 
    57.     resolver 8.8.8.8 114.114.114.114;
    58.     resolver_timeout 15s; 
    59.     # 监听端口
    60.     listen 8866;
    62.     location / { 
    64.             # 配置正向代理参数 
    65.             proxy_pass $scheme://$host$request_uri; 
    67.             # 解决如果URL中带"."后Nginx 503错误
    68.             proxy_set_header Host $http_host; 
    70.             # 配置缓存大小
    71.             proxy_buffers 256 4k; 
    73.             # 关闭磁盘缓存读写减少I/O 
    74.             proxy_max_temp_file_size 0;
    76.             # 代理连接超时时间 
    77.             proxy_connect_timeout 30; 
    79.             # 配置代理服务器HTTP状态缓存时间 
    80.             proxy_cache_valid 200 302 10m; 
    81.             proxy_cache_valid 301 1h; 
    82.             proxy_cache_valid any 1m;
    83.     }
    85. }
    87. include /etc/nginx/conf.d/*.conf;
    88. include /usr/local/ssl/*.conf;

    }

    ```