server {
        listen [::]:80;
        listen 80; 
        listen 443 ssl; 
        listen [::]:443 ssl;
        
        server_name blog.yun316.com;
        ssl_certificate /home/ssl/d.crt;
        ssl_certificate_key /home/ssl/d.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        
        root /home/www;
        index index.html index.php;

        location /down {
        proxy_redirect off;
        proxy_pass http://127.0.0.1:8550;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

}