码迷,mamicode.com
首页 > Web开发 > 详细

Nginx配置https

时间:2019-12-27 15:24:13      阅读:105      评论:0      收藏:0      [点我收藏+]

标签:ted   端口   _for   示例   col   ssl   tlsv1   task   add   

示例

worker_processes 1;

events {
  worker_connections 1024;
}

http {

  upstream demo{
    server localhost:55328;
  }

  include mime.types;
  default_type application/octet-stream;

  sendfile on;
  keepalive_timeout 65;

  client_max_body_size 500m;
  map $http_upgrade $connection_upgrade {
    default upgrade;
  }
#访问80端口,重定向到https
  server {
    listen 80;
    server_name [server_name];
    rewrite ^(.*)$ https://${server_name}$1 permanent;
  }

  server {
    listen 80;
    server_name [server_name];
    rewrite ^(.*)$ https://${server_name}$1 permanent;
  }

  server {
    listen 80;
    server_name [server_name];
    rewrite ^(.*)$ https://${server_name}$1 permanent;
  }

  server {
    listen 443 ssl;
    server_name [server_name];
    
    #ssl_certificate ssl/[server_name].pem; # 指定证书的位置,绝对路径
    #ssl_certificate_key ssl/[server_name].key; # 绝对路径,同上 
    #ssl_trusted_certificate ./ssl/[server_name].cer;
   
    ssl_certificate         ./ssl/fullchain.cer; 
    ssl_certificate_key     ./ssl/[server_name].key;

    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
    ssl_prefer_server_ciphers on;

    proxy_set_header    Host                 $host;
    proxy_set_header    X-Real-IP             $remote_addr;
    proxy_set_header    X-Forwarded-For       $proxy_add_x_forwarded_for;
    proxy_set_header    X-Forwarded-Proto     $scheme;

    location / {
      proxy_connect_timeout 1;
      proxy_pass http://localhost:50852;
    }
    location /NotiHub {
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_pass http://localhost:50852/NotiHub;
    }
    location /TaskLogHub {
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_pass http://localhost:50852/TaskLogHub;
    }
    location = /50x.html {
      root html;
    }
    error_page 404 500 502 503 504 /50x.html;
  }
}

配置说明

#转发Tcp
stream {
    proxy_timeout 30m;
    server {
        listen 8080;
        proxy_pass localhost:55328;
    }
}
#使用 WebSocket 需要添加以下配置
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
#使用 SSE 需要添加以下配置
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;

proxy_set_header Connection;
chunked_transfer_encoding off;
proxy_cache off;

Nginx配置https

标签:ted   端口   _for   示例   col   ssl   tlsv1   task   add   

原文地址:https://www.cnblogs.com/ysmc/p/12107295.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!