nginx.conf 配置tp5和https

user  www www;


worker_processes auto;


error_log  /home/wwwlogs/nginx_error.log  crit;


pid        /usr/local/nginx/logs/nginx.pid;


#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;


events
    {
        use epoll;
        worker_connections 51200;
        multi_accept on;
    }


http
    {
        include       mime.types;
        default_type  application/octet-stream;


        server_names_hash_bucket_size 128;
        client_header_buffer_size 32k;
        large_client_header_buffers 4 32k;
        client_max_body_size 50m;


        sendfile   on;
        tcp_nopush on;


        keepalive_timeout 60;


        tcp_nodelay on;


        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        fastcgi_buffer_size 64k;
        fastcgi_buffers 4 64k;
        fastcgi_busy_buffers_size 128k;
        fastcgi_temp_file_write_size 256k;


        gzip on;
        gzip_min_length  1k;
        gzip_buffers     4 16k;
        gzip_http_version 1.1;
        gzip_comp_level 2;
        gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
        gzip_vary on;
        gzip_proxied   expired no-cache no-store private auth;
        gzip_disable   "MSIE [1-6]\.";


        #limit_conn_zone $binary_remote_addr zone=perip:10m;
        ##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.


        server_tokens off;
        access_log off;


server {
    listen 443;
    server_name 域名; 
    ssl on;
    root /data/web/main; 
    index index.html index.htm index.php;
    ssl_certificate  pem地址;
    ssl_certificate_key key的地址;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location / {
        root   /data/web/main;
        index  index.html index.htm hello.php index.php;
    }


    location ~ \.php {         #（tp5）
        root           /data/web/main;
        fastcgi_pass   unix:/tmp/php-cgi.sock; #也可以改成端口的 127.0.0.1:9000
        fastcgi_index  index.php;
        fastcgi_split_path_info ^(.+\.php)(.*)$; #增加这一句  （tp5）
        fastcgi_param PATH_INFO $fastcgi_path_info;    #增加这一句  （tp5）
        fastcgi_param  HTTPS   on;
        fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
        include        fastcgi_params;    
        #new line
        include fastcgi.conf;            
    }
    
}
server {
    listen 80 default_server;
    #listen [::]:80 default_server ipv6only=on;
    server_name _;
    index index.html index.htm index.php;
    root  /data/web/main;


    #error_page   404   /404.html;


    # Deny access to PHP files in specific directory
    #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }


    include enable-php.conf;


    location /nginx_status
    {
        stub_status on;
        access_log   off;
    }


    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
    }


    location ~ .*\.(js|css)?$
    {
        expires      12h;
    }


    location ~ /.well-known {
        allow all;
    }


    location ~ /\.
    {
        deny all;
    }


    access_log  /home/wwwlogs/access.log;
    rewrite ^(.*)$ https://$host$1 permanent;  #重定向
}
include vhost/*.conf;
}