server { listen 80; server_name wx.sznewsoft.com; root /opt/nginx-root; location /api { proxy_pass http://zz-web/api; proxy_redirect off; } } server { listen 443; server_name wx.sznewsoft.com; ssl on; ssl_certificate /etc/nginx/cert/5592355_wx.sznewsoft.com.pem; ssl_certificate_key /etc/nginx/cert/5592355_wx.sznewsoft.com.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; location /api { proxy_pass http://zz-web/api; proxy_redirect off; } }