自建kms服务器教程

server {
        listen       80;
        add_header Access-Control-Allow-Origin * always;
        server_name kms.xiaoliu.life;
        return 301 https://$host$request_uri;
}
server{
        listen       443;
        server_name  kms.xiaoliu.life;
    ssl_certificate     /usr/local/nginx/conf/ssl/kms.xiaoliu.life_bundle.pem;  # pem文件的路径
    ssl_certificate_key  /usr/local/nginx/conf/ssl/kms.xiaoliu.life.key; # key文件的路径
#
## # ssl验证相关配置
     ssl_session_timeout  5m;    #缓存有效期
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    #加密算法
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全链接可选的加密协议
     ssl_prefer_server_ciphers on;
        location / {
            add_header Access-Control-Allow-Origin * always;
            add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS,PUT,DELETE' always;
            add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
             proxy_pass  http://127.0.0.1:1688;
}
}