WordPress+Cloudflare Full SSL - Nginx Configuration

WordPress+Cloudflare Full SSL - Nginx Configuration

# HTTP Server
server {
    listen 80;
    server_name yourwebsitename.com www.yourwebsitename.com;
    rewrite ^ https://$server_name$request_uri permanent;
}

# HTTPS Server
server {
    listen 443;
    server_name yourwebsitename.com www.yourwebsitename.com;

    root /usr/share/nginx/html;
    index index.php;
    error_log /var/log/nginx/yourwebsitename.com.log crit;

    ssl on;
    ssl_certificate /etc/nginx/ssl/yourwebsitename.com.crt;
    ssl_certificate_key /etc/nginx/ssl/yourwebsitename.com.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # do not use SSLv3 ref: POODLE
    
    client_max_body_size 20M;

    location / {
        try_files $uri $uri/ /index.php;
    }

    location ~ \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
    }

    location /doc/ {
        alias /usr/share/doc/;
        autoindex on;
        allow 127.0.0.1;
        deny all;
    }

    location ~/\.ht {
        deny all;
    }
}

1. Enable full SSL in CloudFlare
   https://www.cloudflare.com/a/crypto/

2. Generate SSL keys for vps
   sudo openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -keyout /etc/nginx/ssl/yourwebsitename.com.key -out /etc/nginx/ssl/yourwebsitename.com.crt

3. Clear default config & add above config
   sudo nano /etc/nginx/sites-available/default

save it.

4. Restart Server
   service nginx reload