web服务器nginx配置

1，https://nginx.org/en/download.html
从这里下载压缩包。然后解压到服务器。
2，配置http，https，wss等等。

 server {
        listen      80;
        listen       443 ssl;
       server_name  www.chenglindianli.cn;

       ssl_certificate      https/pem.pem;
        ssl_certificate_key  https/key.key;

       ssl_session_cache    shared:SSL:1m;
       ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
       ssl_prefer_server_ciphers  on;

        location / {
          proxy_redirect off;
            proxy_pass http://localhost:8080/XXXX/;
            proxy_cookie_path /XXXX/ /;
            
	    proxy_cookie_path /XXXX /;
            
	    proxy_set_header Host $host;
            
	    proxy_set_header Referer $http_referer;
            
	    proxy_set_header Cookie $http_cookie;               
	    proxy_set_header X-Real-Ip $remote_addr;
            
	    proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
            
        }
         
 location /wss/ {
          proxy_redirect off;
            proxy_pass http://localhost:8080/XXXX/;
            proxy_cookie_path /XXXX/ /;
            
	    proxy_cookie_path /XXXX /;
            
	    proxy_set_header Host $host;
            
	    proxy_set_header Referer $http_referer;
            
	    proxy_set_header Cookie $http_cookie;               
	    proxy_set_header X-Real-Ip $remote_addr;
            
	    proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
             proxy_set_header Upgrade $http_upgrade;    #支持wss
            proxy_set_header Connection "upgrade";    #支持wss
        }
    }

特别指出，把pem和key放到config目录下，否则会失败。
3，cmd启动，start nginx和nginx -s stop
4，tomcat配置https，以实现wss功能。

 <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
   <Connector port="8443" 
    protocol="org.apache.coyote.http11.Http11NioProtocol"
    SSLEnabled="true" 
    scheme="https" 
    secure="true"
    clientAuth="false" 
    sslProtocol="TLS"
    keystoreFile="pfx.pfx"
    keystorePass="1974EYqH"
     keystoreType="PKCS12"
   />

pfx.pfx放置于conf之下
特别注意，eclipse和tomcat是两张皮。