nginx ssl及wss配置

#/data/nginx/conf.d/default.conf
server {
 listen 443 ssl;
 server_name x; 
 ssl_certificate  /etc/nginx/certs/x.crt;
 ssl_certificate_key /etc/nginx/certs/x.key; 
 ssl_session_timeout 5m;
 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
 ssl_prefer_server_ciphers on;
 location / {
   #root  /usr/share/nginx/html;
   #index  index.html index.htm;
   proxy_pass http://172.17.0.3:7860; 
   proxy_http_version 1.1;
   proxy_set_header Upgrade $http_upgrade;
   proxy_set_header Connection "upgrade";}
}
server {
 listen 80;
 server_name x; 
 return 301 https://$host$request_uri; 
}