轻量应用服务器部署SSL证书Nginx+WordPress

由于阿里云：轻量应用服务器，绑定区域不支持直接绑定，那么就需要手动配置。

目前演示采用的是环境介绍：

Nginx 1.18

目录：/usr/local/nginx

PHP 7.4

目录：/usr/local/php

MySQL 5.7

目录：/usr/local/mysql

版本：WordPress 5.6.2

一、防火墙设置允许443端口

二、FTP进入：/usr/local/nginx/conf/vhost

配置：wwordpress.conf文件，注意红色标注的分别是证书目录位置，进入FTP替换证书文件。

用到nginx文件夹。如果怕麻烦可以直接修改文件名称一样替换一下就可以了。

if ($ssl_protocol = "") { return 301 https://$host$request_uri; }

该代码用于强制HTTPS访问，如果不需要设置可以删除，一般情况下都需要。

server {

listen 80;

listen [::]:80;

listen 443 ssl http2;

listen [::]:443 ssl http2;

ssl_certificate /usr/local/nginx/conf/ssl/www.example.com.crt;

ssl_certificate_key /usr/local/nginx/conf/ssl/www.example.com.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_ciphers TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_prefer_server_ciphers on;

ssl_session_timeout 10m;

ssl_session_cache builtin:1000 shared:SSL:10m;

ssl_buffer_size 1400;

add_header Strict-Transport-Security max-age=15768000;

ssl_stapling on;

ssl_stapling_verify on;

server_name _;

access_log /data/wwwlogs/wordpress_nginx.log combined;

index index.html index.htm index.php;

root /data/wwwroot/wordpress;

if ($ssl_protocol = "") { return 301 https://$host$request_uri; }

#if ($host != www.example.com) { return 301 $scheme://www.example.com$request_uri; }

include /usr/local/nginx/conf/rewrite/wordpress.conf;

#error_page 404 /404.html;

#error_page 502 /502.html;

location ~ [^/]\.php(/|$) {

#fastcgi_pass remote_php_ip:9000;

fastcgi_pass unix:/dev/shm/php-cgi.sock;

fastcgi_index index.php;

include fastcgi.conf;

}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {

expires 30d;

access_log off;

}

location ~ .*\.(js|css)?$ {

expires 7d;

access_log off;

}

location ~ /(\.user\.ini|\.ht|\.git|\.svn|\.project|LICENSE|README\.md) {

deny all;

}

}

三、安装后重启nginx使其生效

centos6

service nginx restart

centos7

systemctl restart nginx

启动数据库：service mysqld start

四、WordPress 5.6.2，后台将网站地址改成HTTPS就可以了。