# fanqiang service
server {
  listen 443 ssl;
  server_name fq.zhixinghe1.top;
  
  ssl_session_timeout 5m;
  ssl_prefer_server_ciphers on;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_certificate cert/fq.zhixinghe1.top.pem;
  ssl_certificate_key cert/fq.zhixinghe1.top.key;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  
  location / {
    add_header Access-Control-Allow-Origin *;
    proxy_redirect off;
    proxy_pass http://localhost.com:19090;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    #proxy_set_header Host $http_host;
    proxy_set_header Host $host:$server_port;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
}