server {
          listen 80;
          server_name localhost;
          rewrite ^(.*) https://$host$1 permanent;
    }
    server {
        listen       443;
        server_name  www.xxx.cn;
        root /data/www/blog/;

        ssl on;
        ssl_certificate /data/www/blog/ssl/1_www.xxx.cn_bundle.crt;
        ssl_certificate_key /data/www/blog/ssl/2_www.xxx.cn.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location / {
                 try_files $uri $uri/ /index.html;
        }

        location /api {
                proxy_pass http://118.89.60.117:3030;
        }

        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }