nginx 443 标准配置

不带80转发

server {
    listen       443 ssl http2;
    server_name  concrete.baimei.net;

    ssl_certificate      /etc/nginx/ssl_key/baimei.net.pem;
    ssl_certificate_key  /etc/nginx/ssl_key/baimei.net.key;
    ssl_session_cache    shared:SSL:10m;
    ssl_protocols        TLSv1.2 TLSv1.3;
    ssl_ciphers          HIGH:!aNULL:!MD5;

    charset utf-8;

    location / {
        proxy_pass http://localhost:81;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    access_log  /var/log/nginx/concrete.baimei.net.log;
    error_log   /var/log/nginx/concrete.baimei.net.error.log;
}

带80转发的

server {
	listen 443 ssl;
	server_name test.baimeidashu.com;
        ssl_certificate /etc/nginx/ssl_key/test.baimeidashu.com/test.baimeidashu.com.pem; 
        ssl_certificate_key  /etc/nginx/ssl_key/test.baimeidashu.com/test.baimeidashu.com.key; 

         location / {
          proxy_pass http://192.168.1.209:31009;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_send_timeout 3600s;
          proxy_buffering off;
          proxy_read_timeout 3600s;
          proxy_connect_timeout 3600;
          }
  
        location /api {
            rewrite ^/api/(.*) /$1 break; 
            proxy_pass https://uat-cloudservice.baimeidashu.com;
            proxy_send_timeout 3600s;
            proxy_buffering off;
            proxy_read_timeout 3600s;
            proxy_connect_timeout 3600;
            client_max_body_size 3000m;       

 } 



       location ^~ /oss {
                rewrite ^/oss/(.*) /$1 break; #去掉路径/oss/
                # oss内网地址
		proxy_pass https://kt-t.oss-accelerate.aliyuncs.com;
                # oss内网地址
                proxy_set_header Host kt-t.oss-accelerate.aliyuncs.com; 
		proxy_set_header X-Forwarded-Proto $scheme;
          	proxy_set_header X-Forwarded-Host $host;
          	proxy_set_header X-Forwarded-Server $host;
          	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          	proxy_set_header X-Real-IP $remote_addr;
	        proxy_http_version 1.1;
    	  	proxy_set_header Upgrade $http_upgrade;
    	  	proxy_set_header Connection "Upgrade";
	  	    proxy_read_timeout 1d;
          	proxy_send_timeout 1d;
                # 此处配置是为了把阿里云oss的返回的Content-Disposition隐藏掉，否则图片或文件在浏览器中会下载，不会显示。
		   # proxy_hide_header Content-Disposition;
       }

     access_log  /var/log/nginx/test.baimeidashu.com.log;
     error_log  /var/log/nginx/test.baimeidashu.com.error.log;

       error_page 502 503 /50x.html;
       location = /50x.html {
          root /usr/share/nginx/html;
}
}

                                                                                                                                                                                                                                        
server {
        listen 80;
        server_name test.baimeidashu.com;
        if ($host != 'test.baimeidashu.com') {
        return 403;
         } 
       #return 302 https://$server_name$request_uri;

        rewrite ^/(.*)$ https://$server_name:443/$1 permanent;
}              

欢迎来撩 ： 汇总all