server {
listen 443 ssl;
server_name A.B;//一级域名
ssl_certificate openssl/server.crt;
ssl_certificate_key openssl/server.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:82/;
client_max_body_size 50m;
fastcgi_ignore_client_abort on;
proxy_store off;
proxy_redirect off;
proxy_ignore_client_abort on;
proxy_connect_timeout 300s;
proxy_read_timeout 300s;
proxy_send_timeout 300s;
proxy_next_upstream http_502 http_504 http_404 error timeout invalid_header;
proxy_set_header Host $host;
proxy_set_header REMOTE_ADDR $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
server_name fb.A.B;//二级域名
ssl_certificate openssl/server.crt;
ssl_certificate_key openssl/server.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:83/;
client_max_body_size 50m;
fastcgi_ignore_client_abort on;
proxy_store off;
proxy_redirect off;
proxy_ignore_client_abort on;
proxy_connect_timeout 300s;
proxy_read_timeout 300s;
proxy_send_timeout 300s;
proxy_next_upstream http_502 http_504 http_404 error timeout invalid_header;
proxy_set_header Host $host;
proxy_set_header REMOTE_ADDR $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}