# ssl 证书
ssl_certificate 证书目录;
ssl_certificate_key 私钥目录;

# http跳转https
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    return 301 https://$host$request_uri;
}

# 默认ssl拒绝握手
server {
    # listen 443 default_server;
    # listen [::]:443 default_server;
    listen 8443 default_server;
    listen [::]:8443 default_server;

    ssl_reject_handshake on;
}