#user  nobody;
worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
  client_max_body_size 80m;
  client_body_buffer_size 10m;
    sendfile        on;
    tcp_nopush     on;
    keepalive_timeout  120;
  server_tokens off;
    server {
        listen 80 ; 
        listen 443 ssl;
        server_name www.xxx.com;
        access_log  logs/www.xxx.com.log;
        error_log  logs/www.xxx.com.log;	
        ssl_certificate     ssl/xxx.com.crt;
        ssl_certificate_key ssl/xxx.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        root   html;
        index  index.html index.htm index.php;
        location / {
            proxy_pass  http://10.10.202.17:18080;
            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
            proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
            proxy_max_temp_file_size 0;
            proxy_connect_timeout      90;
            proxy_send_timeout         90;
            proxy_read_timeout         90;
            proxy_buffer_size          4k;
            proxy_buffers              4 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;
       }
    }
}