Nginx配置https协议

一、配置SSL

将生成的SSL文件cert放到Nginx跟目录

二、Nginx部署vue项目

更改.env.development和.env.production文件中的接口地址

IP和端口为前端的地址，/sdd/system为自定义前缀，nginx.conf文件需要用到

 

将vue项目打包后文件dist放到Nginx根目录下html目录中

三、修改nginx.conf配置文件

#user  nobody;

worker_processes  1;

#error_log  logs/error.log;

#error_log  logs/error.log  notice;

#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {

   worker_connections  1024;

}

http {

   include       mime.types;

   default_type  application/octet-stream;

   #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

   #                  '$status $body_bytes_sent "$http_referer" '

   #                  '"$http_user_agent" "$http_x_forwarded_for"';

   #access_log  logs/access.log  main;

   sendfile        on;

   #tcp_nopush     on;

   #keepalive_timeout  0;

   keepalive_timeout  65;

   #gzip  on;

server{

 listen 8088 ssl;      # https 请求默认走443端口

 server_name 192.168.1.222;    # 你要https 访问的网站的域名

 ssl_certificate  D:/SoftWare/nginx-1.8.0/nginx-1.8.0/cert/cn.ctyun.sdd_ssl.crt;

 ssl_certificate_key  D:/SoftWare/nginx-1.8.0/nginx-1.8.0/cert/cn.ctyun.sdd_key.txt;

 ssl_session_timeout 5m;

 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

 ssl_prefer_server_ciphers on;

 index index.html;

 root D:/SoftWare/nginx-1.8.0/nginx-1.8.0/html/dist;

 location / {

   try_files $uri $uri @router;

   index  index.html;

 }

 location @router {

   rewrite ^.*$ /index.html last;   # 通过这行代码，可以强制http请求重定向到https请求

 }

# 这里配置反向代理的项目  /sdd/system/为自定义前缀

 location /sdd/system/ {

  proxy_pass http://192.168.1.110:8000; # 后端项目真实地址

 

  # 固定写法-------------

  proxy_set_header  X-Real-IP  $remote_addr;

  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

  proxy_set_header X-Forwarded-For $remote_addr;

  proxy_set_header X-Forwarded-Proto $scheme;

  proxy_set_header X-Forwarded-Port $server_port;

 

 }

}  

 

#spring boot 项目的https的配置    

#server {

# listen 8089 ssl;

# server_name 192.168.1.222;    # 域名配置，可以多个

 

  # 固定写法-------------

# ssl_certificate  D:/SoftWare/nginx-1.8.0/nginx-1.8.0/cert/cn.ctyun.sdd_ssl.crt;

# ssl_certificate_key  D:/SoftWare/nginx-1.8.0/nginx-1.8.0/cert/cn.ctyun.sdd_key.txt;

# ssl_session_timeout 5m;

# ssl_ciphers ECDHE-RSA-AES128-GCM-#SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

#  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

#ssl_prefer_server_ciphers on;

   # 这里配置反向代理的项目

# location / {

  #proxy_pass http://192.168.1.110:8000; #后端项目真实地址

  # 固定写法-------------

  #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

  #proxy_set_header X-Forwarded-Proto $scheme;

  #proxy_set_header X-Forwarded-Port $server_port;

 #}

#}

}