nginx域名配置，安全证书配置

一时失言乱红尘 2023-03-04 11:27 5阅读 0赞

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        sendfile        on;
        keepalive_timeout  65;
    
        server {
            listen       80;
            server_name  abc.com; #域名地址（不包含https://）
    
            location / {
                proxy_pass   http://127.0.0.1:8080; #转向的服务端口
                index  index.html index.htm;
            }
    
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
        }
    
       # 安全证书配置
       server {
           listen       443 ssl;
           server_name  abc.com;
            ssl on; #nginx 高版本启动会报错，可去除
           ssl_certificate      cert/cert.pem;  # 证书pem地址（我放在了和nginx.config同文件下的cert文件下了）
           ssl_certificate_key  cert/cert.key;  # 证书key地址
    
           ssl_session_cache    shared:SSL:1m;
           ssl_session_timeout  5m;
    
           ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
           ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
           ssl_prefer_server_ciphers  on;
    
           location / {
                root   html;
                index  index.html index.htm;
    		proxy_pass  http://127.0.0.1:8080; #转向的地址
    	        proxy_set_header Host $host;
     		proxy_set_header Upgrade $http_upgrade;  
           	        proxy_set_header Connection "Upgrade"; 
    		proxy_set_header X-Real-IP $remote_addr;
    		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    		proxy_set_header X-Forwarded-Proto $scheme;
            }
        }
    }