Pomelo Lee workspace

 
server
      {
        listen       443;
        server_name proxypay.xx.com;
 
        ssl on;
        ssl_certificate     /etc/nginx/1_proxypay.xx.com_bundle.crt;
        ssl_certificate_key /etc/nginx/2_proxypay.xx.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
 
 
        location / {
            proxy_pass https://pay.xx.com/;
            proxy_ssl_certificate     /etc/nginx/1_pay.xx.com_bundle.crt;
            proxy_ssl_certificate_key /etc/nginx/2_pay.xx.com.key;
        }
   }