#SSL相关配置
#<CERT_PEM> PEM格式证书位置(/tmp/cert.pem)
#<KEY_PEM> 私钥位置(/tmp/private.key)
#<POOL> 支持的协议(SSLv2|SSLv3|TLS1.1|TLS.2|TLS.3)
ssl_certificate <CERT_PEM>;
ssl_certificate_key <KEY_PEM>;
ssl_protocols <POOL>;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;