| # HTTPS安全配置 | |
| proxy_cookie_path / "/; httponly; secure; SameSite=Lax"; | |
| add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"; | |
| #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则 | |
| ssl_certificate /www/server/panel/ssl/certificate.pem; | |
| ssl_certificate_key /www/server/panel/ssl/privateKey.pem; | |
| ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; | |
| ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!MD5; | |
| ssl_prefer_server_ciphers on; | |
| ssl_session_cache shared:SSL:1m; | |
| ssl_session_timeout 1m; | |
| add_header Strict-Transport-Security "max-age=31536000"; | |
| add_header X-Frame-Options SAMEORIGIN; | |
| error_page 497 https://$http_host$request_uri; | |
| #SSL-END |