HTTPS证书配置文件实例

最新推荐文章于 2024-04-11 16:42:10 发布

活着sync

最新推荐文章于 2024-04-11 16:42:10 发布

阅读量427

点赞数

文章标签： HTTPS 域名证书证书 ssl

本文链接：https://blog.csdn.net/qianshi3618/article/details/80735742

版权

服务器

{

server_name blog.weibolove.com;

听80;

返回301 https：//blog.weibolove.com$request_uri;

#index index.html index.htm index.php default.html default.htm default.php;

#root /home/wwwroot/bbs.minqin58.com;

#include none.conf;

#error_page 404 /404.html;

＃拒绝访问特定目录中的PHP文件#

location〜/(wp-content|uploads|wp-includes|images)/.*.php$ {拒绝所有; }

include enable-php.conf;

位置〜。* \。（gif | jpg | jpeg | png | bmp | swf）$
{
expires 30d;
}

location〜。* \。（js | css）？$
{
到期12h;
}

location〜/.well-known {
allow all;
}

location〜/ \。
{
否认所有;
}

access_log off;
}

server
{
listen 443 ssl http2;
#listen [::]：443 ssl http2;
server_name blog.weibolove.com;
index index.html index.htm index.php default.html default.htm default.php;
root /home/wwwroot/blog.weibolove.com/public;
ssl on;
ssl_certificate /usr/local/nginx/conf/vhost/1_blog.weibolove.com_bundle.crt;
ssl_certificate_key /usr/local/nginx/conf/vhost/2_blog.weibolove.com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssE_ciphers“EECDH + CHACHA20：EECDH + CHACHA20-draft：EECDH + AES128：RSA + AES128：EECDH + AES256：RSA + AES256：EECDH + 3DES：RSA + 3DES：！MD5”;
ssl_session_cache内建：1000共享：SSL：10米; ＃openssl
dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

包括none.conf;
#error_page 404 /404.html;

＃拒绝访问特定目录中的PHP文件
#location〜/(wp-content|uploads|wp-includes|images)/.*\.php$ {deny all; }

include enable-php.conf;

位置〜。* \。（gif | jpg | jpeg | png | bmp | swf）$
{
expires 30d;
}

location〜。* \。（js | css）？$
{
expires 12h;
}

location〜/.well-known {
allow all;
}

location〜/ \。
{
否认所有;
}
location / {
if（！-e $ request_filename）{
rewrite ^（。*）$ /index.php?s=/$1 last;
打破;
}
}
access_log off;
}