diff --git a/deploy/deploy_with_apache.md b/deploy/deploy_with_apache.md
index fa71a9e2..f3f3172e 100644
--- a/deploy/deploy_with_apache.md
+++ b/deploy/deploy_with_apache.md
@@ -1,5 +1,5 @@
# Seafile
-## Deploy with apache
+## Deploy with Apache
## Prepare
diff --git a/deploy/https_with_apache.md b/deploy/https_with_apache.md
new file mode 100644
index 00000000..14a55b6f
--- /dev/null
+++ b/deploy/https_with_apache.md
@@ -0,0 +1,106 @@
+# Seafile
+## Enabling Https with Apache
+
+## Generate SSL digital certificate with OpenSSL
+
+Here we use self-signed SSL digital certificate for free. If you use a paid ssl certificate from some authority, just skip the this step.
+
+
+ openssl genrsa -out privkey.pem 2048
+ openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
+
+
+## Enable https on Seahub
+
+Assume you have configured Apache as [Deploy Seafile with
+Apache](deploy_with_apache.md). To use https, you need to enable mod_ssl
+
+
+[sudo] a2enmod ssl
+
+
+On Windows, you have to add ssl module to httpd.conf
+
+LoadModule ssl_module modules/mod_ssl.so
+
+
+Then modify your Apache configuration file. Here is a sample:
+
+
+
+ ServerName www.myseafile.com
+ DocumentRoot /var/www
+ Alias /media /home/user/haiwen/seafile-server-latest/seahub/media
+
+ SSLEngine On
+ SSLCertificateFile /path/to/cacert.pem
+ SSLCertificateKeyFile /path/to/privkey.pem
+
+ RewriteEngine On
+
+ #
+ # seafile httpserver
+ #
+ ProxyPass /seafhttp http://127.0.0.1:8082
+ ProxyPassReverse /seafhttp http://127.0.0.1:8082
+ RewriteRule ^/seafhttp - [QSA,L]
+
+ #
+ # seahub
+ #
+ RewriteRule ^/(media.*)$ /$1 [QSA,L,PT]
+ RewriteCond %{REQUEST_FILENAME} !-f
+ RewriteRule ^(.*)$ /seahub.fcgi/$1 [QSA,L,E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+
+
+## Modify settings to use https
+
+### ccnet conf
+
+Since you change from http to https, you need to modify the value of "SERVICE_URL" in ccnet/ccnet.conf:
+
+SERVICE_URL = https://www.myseafile.com
+
+
+### seahub_settings.py=
+
+
+HTTP_SERVER_ROOT = 'https://www.myseafile.com/seafhttp'
+
+
+## Start Seafile and Seahub
+
+
+./seafile.sh start
+./seahub.sh start-fastcgi
+
+
+
+## Detailed explanation
+
+The picture at the end of [this document](components.md) may help you understand seafile server better
+
+There are two components in Seafile server, Seahub and HttpServer. HttpServer only servers for raw file uploading/downloading, it listens on 8082. Seahub, that serving all the other pages, is still listen on 8000. But under https, Seahub should listen as in fastcgi mode on 8000 (run as ./seahub.sh start-fastcgi). And as in fastcgi mode, when you visit http://domain:8000 directly, it should return an error page.
+
+When a user visit https://domain.com/home/my/, Apache receives this request and sends it to Seahub via fastcgi. This is controlled by the following config items:
+
+ #
+ # seahub
+ #
+ RewriteRule ^/(media.*)$ /$1 [QSA,L,PT]
+ RewriteCond %{REQUEST_FILENAME} !-f
+ RewriteRule ^/(seahub.*)$ /seahub.fcgi/$1 [QSA,L,E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+
+and
+
+ FastCGIExternalServer /var/www/seahub.fcgi -host 127.0.0.1:8000
+
+
+When a user click a file download link in Seahub, Seahub reads the value of HTTP_SERVER_ROOT and redirects the user to address `https://domain.com/seafhttp/xxxxx/`. `https://domain.com/seafhttp` is the value of HTTP_SERVER_ROOT. Here, the `HTTP_SERVER` means the HttpServer component of Seafile, which only serves for raw file downloading/uploading.
+
+When Apache receives the request at 'https://domain.com/seafhttp/xxxxx/', it proxies the request to HttpServer, which is listening at 127.0.0.1:8082. This is controlled by the following config items:
+
+ ProxyPass /seafhttp http://127.0.0.1:8082
+ ProxyPassReverse /seafhttp http://127.0.0.1:8082
+ RewriteRule ^/seafhttp - [QSA,L]
diff --git a/deploy/https_with_nginx.md b/deploy/https_with_nginx.md
new file mode 100644
index 00000000..48ddbbeb
--- /dev/null
+++ b/deploy/https_with_nginx.md
@@ -0,0 +1,116 @@
+# Seafile
+## Enabling Https with Nginx
+
+Here we use self-signed SSL digital certificate for free. If you use a paid ssl certificate from some authority, just skip the first step.
+
+### Generate SSL digital certificate with OpenSSL
+```bash
+ openssl genrsa -out privkey.pem 2048
+ openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
+```
+
+### Enable SSL module of Nginx (optional)
+If your Nginx does not support SSL, you need to recompile it, the commands are as follows:
+```bash
+ ./configure --with-http_stub_status_module --with-http_ssl_module
+ make && make install
+```
+
+### Modify Nginx configuration file
+
+Assume you have configured nginx as
+[Deploy-Seafile-with-nginx](deploy_with_nginx.md). To use https, you need to modify your nginx configuration file.
+```nginx
+ server {
+ listen 80;
+ server_name www.yourdoamin.com;
+ rewrite ^ https://$http_host$request_uri? permanent; # force redirect http to https
+ }
+
+ server {
+ listen 443;
+ ssl on;
+ ssl_certificate /etc/ssl/cacert.pem; # path to your cacert.pem
+ ssl_certificate_key /etc/ssl/privkey.pem; # path to your privkey.pem
+ server_name www.yourdoamin.com;
+ # ......
+ fastcgi_param HTTPS on;
+ fastcgi_param HTTP_SCHEME https;
+ }
+```
+
+
+### Sample configuration file
+
+Here is the sample configuration file:
+
+```nginx
+ server {
+ listen 80;
+ server_name www.yourdoamin.com;
+ rewrite ^ https://$http_host$request_uri? permanent; # force redirect http to https
+ }
+ server {
+ listen 443;
+ ssl on;
+ ssl_certificate /etc/ssl/cacert.pem; # path to your cacert.pem
+ ssl_certificate_key /etc/ssl/privkey.pem; # path to your privkey.pem
+ server_name www.yourdoamin.com;
+ location / {
+ fastcgi_pass 127.0.0.1:8000;
+ fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+ fastcgi_param PATH_INFO $fastcgi_script_name;
+
+ fastcgi_param SERVER_PROTOCOL $server_protocol;
+ fastcgi_param QUERY_STRING $query_string;
+ fastcgi_param REQUEST_METHOD $request_method;
+ fastcgi_param CONTENT_TYPE $content_type;
+ fastcgi_param CONTENT_LENGTH $content_length;
+ fastcgi_param SERVER_ADDR $server_addr;
+ fastcgi_param SERVER_PORT $server_port;
+ fastcgi_param SERVER_NAME $server_name;
+ fastcgi_param HTTPS on;
+ fastcgi_param HTTP_SCHEME https;
+
+ access_log /var/log/nginx/seahub.access.log;
+ error_log /var/log/nginx/seahub.error.log;
+ }
+ location /seafhttp {
+ rewrite ^/seafhttp(.*)$ $1 break;
+ proxy_pass http://127.0.0.1:8082;
+ client_max_body_size 0;
+ }
+ location /media {
+ root /home/user/haiwen/seafile-server-latest/seahub;
+ }
+ }
+```
+
+### Reload Nginx
+```bash
+ nginx -s reload
+```
+
+## Modify settings to use https
+
+### ccnet conf
+
+Since you change from http to https, you need to modify the value of "SERVICE_URL" in ccnet/ccnet.conf:
+```bash
+SERVICE_URL = https://www.yourdomain.com
+```
+
+### seahub_settings.py
+
+At the end of the file, add a line:
+
+```python
+HTTP_SERVER_ROOT = 'https://www.yourdomain.com/seafhttp'
+```
+
+## Start Seafile and Seahub
+
+```bash
+./seafile.sh start
+./seahub.sh start-fastcgi
+```