Nginx的ssl配置及处理ifream跨域问题

ℒℴѵℯ棋子豆

已于 2022-04-11 16:47:44 修改

阅读量393

点赞数

文章标签： nginx

于 2022-04-11 16:45:23 首次发布

本文链接：https://blog.csdn.net/qq_41298861/article/details/124103095

版权

该配置文件展示了如何使用Nginx进行HTTPS配置，以及微信小程序Itemall接口的HTTPS设置。同时，配置中包含了针对若依棋子豆qizidou项目的多个服务器块，分别监听不同端口，实现前后台的HTTP及HTTPS访问，并处理跨域请求。此外，还包含了错误页面的定义。

摘要由CSDN通过智能技术生成

nginx.conf配置文件配置

worker_processes  1;
pid        /usr/local/nginx/logs/nginx.pid;
events {
    worker_connections  1024;
}
http {

    include       mime.types;
    default_type  application/octet-stream;
    keepalive_timeout  65;

    server {
        listen       80;
        server_name  localhost;
        rewrite ^/(.*)$ https://xiaokeli.top:443/$1 permanent;
    }

	#微信小程序Itemall小程序接口https配置
	server {
	    #listen 443
		listen 443 ssl;
		server_name www.xxxx.com;
		# ssl on;
		ssl_certificate /etc/ssl/6941518_www.xiaokeli.top.pem;
		ssl_certificate_key /etc/ssl/6941518_www.xiaokeli.top.key;
		ssl_session_timeout 5m;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
		ssl_prefer_server_ciphers on;
        location /b82xG9Jl7J.txt {
		      alias /usr/local/nginx/conf/b82xG9Jl7J.txt;
		}
		location / {
		    #可以内嵌ifream实现跨域不被拦截
		   add_header X-Frame-Options SAMEORIGIN;
            proxy_set_header Host $http_host;
            proxy_pass  http://localhost:9421;
            proxy_set_header    Host    $host;
            proxy_set_header    X-Real-IP   $remote_addr;
            proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
        }
		error_page   500 502 503 504  /50x.html;
	    location = /50x.html {
	    root   html;
	    }
		
    }
	
    #若依棋子豆qizidou前后台http配置
    server {
    listen       10021;
    server_name  localhost;
	location /b82xG9Jl7J.txt {
		      alias /usr/local/nginx/conf/b82xG9Jl7J.txt;
	        }
	location / {
        root   /home/projects/qizidou-ui;
		try_files $uri $uri/ /index.html;
        index  index.html index.htm;
            }

	location /prod-api/{
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header REMOTE-HOST $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_pass http://localhost:10020/;
	        }
    error_page   500 502 503 504  /50x.html;
	location = /50x.html {
	    root   html;
	        }
    }

	server {
    listen       9527;
    server_name  localhost;
	location /b82xG9Jl7J.txt {
		      alias /usr/local/nginx/conf/b82xG9Jl7J.txt;
	        }
	location / {
        root   /home/wechat/wechatadmin-ui;
		try_files $uri $uri/ /index.html;
        index  index.html index.htm;
            }

	location /admin/{
	    proxy_pass  http://localhost:9421;
        proxy_set_header    Host    $host;
        proxy_set_header    X-Real-IP   $remote_addr;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
	        }
    error_page   500 502 503 504  /50x.html;
	location = /50x.html {
	    root   html;
	        }
    }
	

	#初始棋子豆qizidou https若依的配置
    #server {
    #    listen       443 ssl;
    #    server_name  xiaokeli.top;
    #
    #    ssl_certificate      /etc/ssl/6941518_www.xiaokeli.top.pem;
    #    ssl_certificate_key  /etc/ssl/6941518_www.xiaokeli.top.key;
    #
    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;
    #
    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;
    #    location /b82xG9Jl7J.txt {
	#	      alias /usr/local/nginx/conf/b82xG9Jl7J.txt;
	#	 }
    #   location / {
    #        root   /home/projects/qizidou-ui;
	#		try_files $uri $uri/ /index.html
    #        index  index.html index.htm;
    #    }
	#	location /prod-api/{
    #    		proxy_set_header Host $http_host;
    #    		proxy_set_header X-Real-IP $remote_addr;
    #    		proxy_set_header REMOTE-HOST $remote_addr;
    #    		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    #    		proxy_pass http://localhost:8080/;
    #    	}
	#   error_page   500 502 503 504  /50x.html;
	#   location = /50x.html {
	#   root   html;
	#   }
	#	
    #}

	
}