免费好用的阿里云云盾证书服务(https证书)申请及Nginx配置

user root;
worker_processes 1; 

error_log /app/log/nginx/error.log;
pid /var/run/nginx.pid;
 
events {
    worker_connections  1024; 
}
 
 
http {
    log_format  main  ‘$remote_addr - $remote_user [$time_local] "$request" ‘
                      ‘$status $body_bytes_sent "$http_referer" ‘
                      ‘"$http_user_agent" "$http_x_forwarded_for"‘;
 
    access_log  /app/log/nginx/access.log  main;
 
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
 
    include             /app/nginx-1.12.2/conf/mime.types;
    default_type        application/octet-stream;
 
    upstream django { 
        server 127.0.0.1:8000;
    }
    server {
        listen      80; 
        server_name wengang.top; 
        charset     utf-8;
        client_max_body_size 75M;
        rewrite ^(.*) https://$server_name$1 permanent;   # 将80端口重定向到https
           }


   # HTTPS server
     server {
        listen       443 ssl;
        server_name  wengang.top;
        ssl on;
        ssl_certificate      ****.pem;  # 下载证书中的文件
        ssl_certificate_key  ****.key; # 下载证书中的文件

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;

        charset     utf-8;

        # max upload size
        client_max_body_size 75M;
        location / {
             include     uwsgi_params;
             uwsgi_pass  django;
                }
        location /static{
             alias  /home/shi/allstatic;
                     }
    }
}