nginx ssl及http自动跳转到https配置

1、Nginx路径配置

• 如下请求地址:http://x.x.x.x:8080/api/base/test

此时 zo-java这个应用接收到的地址是：

http://x.x.x.x:8080/api/base/test

location /api/base {
      proxy_pass http://zo-java;
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Host $http_host;
      proxy_set_header X-Forwarded-Port $server_port;
      proxy_set_header X-Forwarded-Proto $scheme;
    }

• 如下请求地址:http://x.x.x.x:8080/api/base/test

此时 zo-java这个应用接收到的地址是：

http://x.x.x.x:8080/test

location /api/base/ {
      proxy_pass http://zo-java/;
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Host $http_host;
      proxy_set_header X-Forwarded-Port $server_port;
      proxy_set_header X-Forwarded-Proto $scheme;
    }

2、nginx ssl及http自动跳转到https配置

nginx 1.18.0版本：

server {
    server_name www.xxxx.com xxxx.com;
    listen 443 ssl http2;
    ssl_certificate /home/cert/xxxx.pem;
    ssl_certificate_key /home/cert/xxxx.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    listen 80;
    error_page 497 https://$host$request_uri;
    location / {
      proxy_pass http://web-home;
      proxy_set_header Host $host:$server_port;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_redirect http:// https://;
    }
  }

2、允许跨域访问

server {
    server_name xxxxx.com;
    listen 443 ssl http2;
    ssl_certificate /home/cert/xxxxx.pem;
    ssl_certificate_key /home/cert/xxxxx.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    listen 80;
    error_page 497 https://$host$request_uri;
    location / {
      proxy_pass http://web-home;
      proxy_set_header Host $host:$server_port;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_redirect http:// https://;
       set $cross_origin "";
      if ($http_origin ~* "^https://a.com$") {
         set $cross_orgin $http_origin;      
      }
      if ($http_origin ~* "^https://b.com$") {
        set $cross_orgin $http_origin;
      }
      if ($http_origin ~* "^https://c.com$") {
        set $cross_orgin $http_origin;
      }
      if ($request_method = 'OPTIONS') {
           add_header 'Access-Control-Allow-Origin' $cross_orgin;
           add_header 'Access-Control-Max-Age' 600;
           add_header 'Content-Type' 'text/plain; charset=utf-8';
           add_header 'Access-Control-Allow-Headers' 'DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,credential,X-XSRF-TOKEN,If-Modified-Since,Cache-Control,Content-Type,Range,token,tenant,userId,username,client' always;
           add_header 'Content-Length' 0;
           return 204;
      }
    }
  }