firewall-cmd --zone=public --add-port=80/tcp --permanent

firewall-cmd --zone=public --add-port=3306/tcp --permanent

firewall-cmd --zone=public --add-port=443/tcp --permanent

firewall-cmd --reload

firewall-cmd --list-ports

ssl on;

ssl_certificate /server.crt;

ssl_certificate_key /server.key;

listen 443 ssl;