nginx配置https(ssl)

nginx安裝命令，要安裝具體的模塊插件

./configure --prefix=/usr/local/nginx --with-stream --with-stream_ssl_module --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module     

 

server {
        listen 80;
        server_name abc.xxxx.com;
        rewrite ^(.*)$  https://$server_name$1 permanent;
    }
    server {
        listen 443 ssl;
        server_name  abc.xxxx.com;
        ssl on;
        ssl_certificate   /usr/local/nginx/cert/3680790_abc.xxxx.com.pem;
        ssl_certificate_key  /usr/local/nginx/cert/3680790_abc.xxxx.com.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        client_max_body_size 100M;
        server_name_in_redirect off;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        location / {
            root   /home/nginx-host/web;
            index  index.html index.htm;
            try_files $uri $uri/ /index.html;
        }
   }

    

    server {
        listen 80;
        server_name sign-api.xxxx.com;
        rewrite ^(.*)$  https://$server_name$1 permanent;
    }
    server {
        listen 443 ssl;
        ssl on;
        ssl_certificate   /usr/local/nginx/cert/3680775_sign-api.xxxx.com.pem;
        ssl_certificate_key  /usr/local/nginx/cert/3680775_sign-api.xxxx.com.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        client_max_body_size 100M;
        server_name  sign-api.xxxx.com;
        server_name_in_redirect off;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        location / {
                proxy_pass http://localhost:9898;
        }
   }