server {

    listen       80;

    server_name  www.xx.com xx.com;

    return 301 https://$server_name$request_uri;

}

server {

       listen       443;

       server_name  www.xx.com xx.com;

       ssl                  on;

       ssl_certificate      /www/xx.com/ssl/xx.com-ca-bundle.crt;

       ssl_certificate_key      /www/xx.com/ssl/xx.com.key;

       ssl_session_timeout  5m;

       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

       ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;

       ssl_prefer_server_ciphers   on;

       location / {

           root   /www/xx.com/www/www;

           index  index.html index.htm;

       }

}