diff --git a/www/default/README.md b/www/default/README.md
index 854a105..ebf7eff 100644
--- a/www/default/README.md
+++ b/www/default/README.md
@@ -2,6 +2,8 @@
 
 ## Nginx 配置
 
+> 该配置需要在 `/etc/nginx/ssl/` 目录下创建 `fullchain.pem` 和 `privkey.pem` 证书文件。
+
 下载配置
 
 ```bash
diff --git a/www/default/nginx.conf b/www/default/nginx.conf
index bb23827..79e78c7 100644
--- a/www/default/nginx.conf
+++ b/www/default/nginx.conf
@@ -27,6 +27,10 @@ server {
     listen 443 ssl default_server;
     listen [::]:443 ssl default_server;
 
+    # ssl 设置
+    ssl_certificate /etc/nginx/ssl/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+
     #
     # Note: You should disable gzip for SSL traffic.
     # See: https://bugs.debian.org/773332