nginx中的PHP项目站点配置SSL证书后的nginx.conf文件内容

郁宇风、黄

已于 2023-10-27 13:58:47 修改

阅读量151

点赞数 2

文章标签： nginx php ssl

于 2023-10-27 13:36:18 首次发布

本文链接：https://blog.csdn.net/weixin_52960369/article/details/134074336

版权

    server {
        listen       80;
        server_name   <yourdomain>;
	    rewrite ^(.*)$  https://$host$1 permanent;  //http重定向到https

        location / {
            root   html;   //项目根目录
            index  index.php index.html index.htm;
            if (!-e $request_filename) {
                rewrite ^(.*)$ /index.php$1 last;
           }
        }
        #error_page  404              /404.html;

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        location ~ ^.+\.php {
            root           html;  //项目根目录
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
            fastcgi_param PATH_INFO $fastcgi_path_info;
            fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
       }

    }

    # HTTPS server
    #
    server {
        # ssl使用443端口
        listen       443 ssl;
        # 证书绑定的域名
        server_name  <yourdomain>;

        ssl_certificate  cert/<cert-file-name>.pem;
        ssl_certificate_key  cert/<cert-file-name>.key;

        # 启用 SSL Session 缓存 
        ssl_session_cache    shared:SSL:1m;
        # 缓存SSL握手产生的参数和加密密钥的时长
        ssl_session_timeout  5m;

        # 使用的加密套件的类型
        ssl_ciphers  HIGH:!aNULL:!MD5;
        # 加密套件优先选择服务器的加密套件
        ssl_prefer_server_ciphers  on;

        location / {
            root   html/zkeys;
            index  index.php index.html index.htm;
            	if (!-e $request_filename){
		    rewrite  ^(.*)$  /index.php?s=$1  last;   break;
	        }
        }
        location ~ ^.+\.php {
            root           html;   //项目根目录
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
            fastcgi_param PATH_INFO $fastcgi_path_info;
            fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
       }
        location ~* (runtime|application)/{
        	return 403;
       }
}