nginx配置代理，开启gzip压缩和升级https

worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    #keepalive_timeout  0;
    keepalive_timeout  65;
    #开启压缩
    gzip  on;
    gzip_static on;    
    gzip_types  text/plain application/x-javascript application/javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_proxied  any;
    gzip_vary on;
    gzip_min_length 5k;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
        # 注：99.99%的浏览器基本上都支持gzip解压了，所以可以不用设这个值,保持系统默认即可。
    gzip_http_version 1.1; 
    server {
         	 #SSL 访问端口号为 443（升级https）
            listen 443 ssl; 
            #填写绑定证书的域名
            server_name fxg1997.top; 
            #证书文件名称
            ssl_certificate 1_www.fxg1997.top_bundle.crt; 
            #私钥文件名称
            ssl_certificate_key 2_www.fxg1997.top.key; 
            ssl_session_timeout 5m;
            #请按照以下协议配置
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
            #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; 
            ssl_prefer_server_ciphers on;
        location / {
            root   html;
            index  index.html index.htm;
        }
		location /dev/ {
			proxy_pass http://localhost:8089/;
		}
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
    server {
        listen 80;
        #填写绑定证书的域名
        server_name fxg1997.top;  
        #把http的域名请求转成https
        return 301 https://$host$request_uri; 
    }
    server {
        listen       8080;
        server_name  localhost1;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   dist;
            index  index.html index.htm;
        }
        #反向代理到本地
		location /jrsuc/cdcyl/ {
			proxy_pass https://jrsuc.cdcyl.com.cn/;
		}

       
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

生成自签证书

openssl version -a
openssl genrsa -out privatekey.pem 1024
openssl req -new -key privatekey.pem -out certrequest.csr
openssl x509 -req -in certrequest.csr -signkey privatekey.pem -out certificate.pem
执行完第三条命令会看到：
  Signature ok
表示生成成功，最终看到如下三个文件
privatekey.pem: 私钥
certrequest.csr: CSR证书签名
certificate.pem: 证书文件