From 4c06464c2fea9acc62c70484fb14a8c1707d2888 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=9D=A6?= <tzwlink@163.com>
Date: Thu, 13 Mar 2025 22:54:04 +0800
Subject: [PATCH] =?UTF-8?q?feat(nginx):=20=E6=B7=BB=E5=8A=A0=20SSL=20?=
 =?UTF-8?q?=E8=AF=81=E4=B9=A6=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 在 nginx.conf 中添加 SSL 证书路径
- 更新 README.md，说明 SSL 证书文件的要求
---
 www/default/README.md  | 2 ++
 www/default/nginx.conf | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/www/default/README.md b/www/default/README.md
index 854a105..ebf7eff 100644
--- a/www/default/README.md
+++ b/www/default/README.md
@@ -2,6 +2,8 @@
 
 ## Nginx 配置
 
+> 该配置需要在 `/etc/nginx/ssl/` 目录下创建 `fullchain.pem` 和 `privkey.pem` 证书文件。
+
 下载配置
 
 ```bash
diff --git a/www/default/nginx.conf b/www/default/nginx.conf
index bb23827..79e78c7 100644
--- a/www/default/nginx.conf
+++ b/www/default/nginx.conf
@@ -27,6 +27,10 @@ server {
     listen 443 ssl default_server;
     listen [::]:443 ssl default_server;
 
+    # ssl 设置
+    ssl_certificate /etc/nginx/ssl/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+
     #
     # Note: You should disable gzip for SSL traffic.
     # See: https://bugs.debian.org/773332