Nginx常用配置

为什么呢（axisk）

已于 2023-07-14 10:18:32 修改

阅读量80

点赞数

文章标签： nginx ssl https

于 2022-10-11 17:05:00 首次发布

本文链接：https://blog.csdn.net/aixuekui/article/details/127265855

版权

conf引用文件

 默认conf为根目录
 include ./xxx/****.conf;

http转https

server {
    listen 80;
    server_name axisk.cn,localhost;
    rewrite ^(.*)$ https://${server_name}$1 permanent;
}

443证书配置

	server {
        listen       443 ssl;
        server_name  api.axisk.cn;
        ssl_certificate     crt/axisk.cn.pem;
        ssl_certificate_key crt/axisk.cn.key;

        ssl_session_cache    shared:SSL:5m;
        ssl_session_timeout  25m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
        location / {
       		proxy_pass http://192.168.0.2:8080/;
        }
}

静态目录配置

server {
    listen       80;         #监听的端口
    server_name  axisk.cn;    #监听的URL
    location / {
        root /usr/local/project/;             #项目路径
        index /index.html;
         #匹配不到任何静态资源，跳到同一个index.htmli
        try_files $uri $uri/ /index.html;       
        add_header Cache-Control no-store; #禁用缓存
    }
}

server {
    listen       80;         #监听的端口
    server_name  axisk.cn;    #监听的URL
    location / {
        alias  /usr/local/project/;             #别名模式
        index /index.html;
         #匹配不到任何静态资源，跳到同一个index.htmli
        try_files $uri $uri/ /index.html;       
        add_header Cache-Control no-store; #禁用缓存
    }
}

跨域配置

add_header Access-Control-Allow-Origin '*';
add_header Access-Control-Allow-Headers '*';
add_header Access-Control-Allow-Methods 'GET,POST,OPTIONS';

if ($request_method = 'OPTIONS') {
    return 204;
}

请求头代理转发

	proxy_set_header Host $host; 
    proxy_set_header X-Real-IP $remote_addr; 
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	#代理版本
	proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
	#超时时间
    proxy_connect_timeout 30s;
    proxy_next_upstream_timeout 30s;
    proxy_next_upstream_tries 1;