一、申请证书
在又拍云或阿里云,申请免费的ssl证书。
二、配置证书
审核通过以后,把证书文件上传到服务器,在nginx配置文件夹下,建立ssl文件夹。
mkdir /etc/nginx/ssl/
将证书文件复制到目录下。
在nginx的配置文件夹下,创建一个web.conf,写入下面内容
配置80端口转发https
server {
listen 80;
server_name m2jm.com;
return 301 https://www.m2jm.com$request_uri;
}
配置接收80 443的请求,并配置证书信息
server{
listen 80;
# 配置HTTPS
listen 443 ssl;
server_name www.m2jm.com;
ssl_certificate /etc/nginx/ssl/www.m2jm.com.crt;
ssl_certificate_key /etc/nginx/ssl/www.m2jm.com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# 下面内容是Lravel网站相关
root /home/workspace/myweb/public;
index index.php;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location ~ \.php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}