shijij

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name yourdomain

    ssl_certificate           /etc/ssl/localcerts/yourdomain.crt;
    ssl_certificate_key       /etc/ssl/localcerts/yourdomain.key;
    ssl_ecdh_curve prime256v1;

    ssl_session_cache  builtin:1000  shared:SSL:10m;