Nginx配置SSL证书

nginx.conf

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;


    # 开启gzip压缩		
    gzip on;
    gzip_min_length 1k;
    gzip_comp_level 9;
    gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_vary on;
    gzip_disable "MSIE [1-6]\.";
    # 缓存配置 缓存文件夹cache_temp 	
    proxy_cache_path cache_temp levels=2:2 keys_zone=cache_zone:30m max_size=32m inactive=60m use_temp_path=off;
	
	# 配置http跳转到https
   server {
      listen 80;
      server_name xxxxx.com;
      rewrite ^(.*) https://$server_name$1 permanent;
   }


   # ssl证书配置
   server {
     #HTTPS的默认访问端口443。
     #如果未在此处配置HTTPS的默认访问端口，可能会造成Nginx无法启动。
     listen 443 ssl;
     
     #填写证书绑定的域名
     server_name xxxxx.com;

     #填写证书文件路径
     ssl_certificate   cert/xxxxx.com.pem;
     #填写证书私钥文件路径
     ssl_certificate_key  cert/xxxxx.com.key;
 
     ssl_session_cache shared:SSL:1m;
     ssl_session_timeout  10m;
     #SSL算法加密选项
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; 
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on; 

     location / {
     		# 前端项目地址
           root html/dist;
           index index.html index.htm;
           try_files $uri $uri/ /index.html;
     }
     # 代理后端接口 
     location  /jeecgboot/ {
            proxy_pass http://127.0.0.1:8080/jeecg-boot/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
     } 
   }
}