Here's what the directives do:
- listen 443 ssl: Firstly, we tell NGINX to listen on port 443 (the HTTPS standard) using the SSL protocol. Previously, we'd simply told NGINX to listen on port 80, and it used HTTP by default.
- ssl_certificate: This is the location of the public key, which needs to be in the PEM format. If your CA also provided intermediate certificates, then they also need to be in this file.
- ssl_certificate_key: This is the location of the private key, and it also needs to be in PEM format. This key needs to be kept safe to ensure the integrity of your certificate—it should only reside on the server.
- ssl_protocols: Here, we specify what variants of the SSL protocols we want to make available. The easiest default ...