nginx 443 https 访问配置案例

worker_processes  1; 
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream; 
    sendfile        on;  
    keepalive_timeout  65; 
	client_max_body_size 1000m;
    server { 
        listen	80;
		server_name www.baidu.com; #绑定域名
	    rewrite ^(.*) https://$server_name$1 permanent; #http 跳转 https
    }	
    server {
		listen 443 ssl;
		server_name www.baidu.com; #需要访问的域名,这里也不用加https;
		ssl_certificate E:/xxxxxxx/xxxxxxx.crt; #这里是ssl key文件存放的绝对路径,根据自己的文件名称和路径来写
		ssl_certificate_key E:/xxxxxxx/xxxxxxx.key; #这里是ssl key文件存放的绝对路径,根据自己的文件名称和路径来写
		ssl_session_cache shared:SSL:1m;
		ssl_session_timeout 5m;
		ssl_ciphers HIGH:!aNULL:!MD5;
		ssl_prefer_server_ciphers on;
		location / {
            proxy_pass http://127.0.0.1:8080/;
        }
        location ^~ /A/ {
            proxy_pass http://127.0.0.1:8082/A/;
        }
		location ^~ /B/ {
		    proxy_pass http://127.0.0.1:8080/B/;
		}
		location ^~ /C/ {
		    proxy_pass http://127.0.0.1:8080/C/;
		}
		location ^~ /D/ {
		    proxy_pass http://127.0.0.1:8081/;
		}
	}	
	
}
---------------------------多个域名配置----------------------------------------------
events {
    worker_connections  1024;
}
http{
    client_max_body_size 1000m;
    server{
        listen       443 ssl;
        server_name  www.baidu1.com;
        root html;
        index index.html index.htm;
        ssl_certificate   D:/证书位置/xxx.crt;
        ssl_certificate_key  D:/证书位置/xxx.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        location / {
                proxy_pass http://127.0.0.1:8080/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
	}	
	server{
        listen       443 ssl;
        server_name  www.baidu2.com;
        root html;
        index index.html index.htm;
        ssl_certificate   D:/证书位置/xxx.crt;
        ssl_certificate_key  D:/证书位置/xxx.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        location / {
                proxy_pass http://127.0.0.1:8080/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
	} 
	server{
         listen       443 ssl;
         server_name  www.baidu3.com; 
         root html;
         index index.html index.htm;
         ssl_certificate   D:/证书位置/xxx.crt;
        ssl_certificate_key  D:/证书位置/xxx.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        location / {
                proxy_pass http://127.0.0.1:8080/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
	}     
    #http转发为https
     server {
         listen       80;
         server_name  www.baidu1.com; 
         rewrite ^(.*)$ https://$server_name$1 permanent;
     }
	 server {
         listen       80;
         server_name  www.baidu2.com; 
         rewrite ^(.*)$ https://$server_name$1 permanent;
     }
     server {
         listen       80;
         server_name  www.baidu3.com;
         rewrite ^(.*)$ https://$server_name$1 permanent;
     }  
}
\..... --... ---.. ...--\..... --... ...-- .\..... ...-- ..... .-\..... -... .- ..---\----- ----- ..--- -.-.\..... ----. ----- -..\..... ..--- ...-- -....\....- . .---- -.-.\---.. ----. --... ..-.\---.. ..-. -.. ---..\--... ..--- --... ----.\....- . ....- ---..\---.. ----. ---.. .----\--... -.... --... -...\..... ..-. ..... .....

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值