Nginx簡單配置HTTPS.

server {
	 listen       443 ssl;
          server_name  www.batac.com batac.com;
        #證書
          ssl_certificate     /root/ssl_nginx/1_www.batac.com_bundle.crt;
          ssl_certificate_key  /root/ssl_nginx/2_www.batac.com.key;
  
         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         ssl_prefer_server_ciphers on;
         ssl_session_cache    shared:SSL:1m;
         ssl_session_timeout  5m;
       

        location / {
        #代理映射本地服務
		proxy_pass http://127.0.0.1:8088;
            root   html;
            index  index.html index.htm;
        }
  }
server {
     listen        80;
     server_name    www.batac.com batac.com;
     
     	#rewrite ^(.*)$ https://$host$1 permanent;
     	return 301 https://www.batac.com$request_uri;
 }

server {
    listen 443;
    #在瀏覽器中輸入的域名不管包不包含www, 都會轉成包含www的完整https連接
    server_name www.dreamqing.com dreamqing.com;
    return 301 https://www.batac.com$request_uri;
}

1.可以申請免費或者購買或者自己定義證書;