server {
    listen 80;
    server_name  projects.wantsong.life;
    rewrite ^/(.*) https://$server_name$request_uri? permanent;
}

server {
    listen 443 ssl;
    server_name  projects.wantsong.life;
    charset utf-8;
    ssl_certificate /etc/nginx/ssl/_.wantsong.life.pem;
    ssl_certificate_key  /etc/nginx/ssl/_.wantsong.life.key;

    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:1m;
    ssl_ciphers AWSGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;		 
    
        location / {
        proxy_redirect     off;
        proxy_set_header   Host             $host;
        proxy_set_header   X-Real-IP        $remote_addr;
        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_max_temp_file_size 0;
        proxy_connect_timeout      90;
        proxy_send_timeout         90;
        proxy_read_timeout         90;
        proxy_buffer_size          4k;
        proxy_buffers              4 32k;
        proxy_busy_buffers_size    64k;
        proxy_temp_file_write_size 64k;
        proxy_pass  http://127.0.0.1:8010;
        client_max_body_size 0;
    }
}