月度归档： 2019 年 8 月

配置块如下

server {
     listen 80 reuseport;
     server_name xxx;
     location / {
        return 301 https://$host$request_uri;
    }
#     rewrite ^(.*)$  https://$host$1 permanent;
}

server {
     listen       443 ssl http2 reuseport;
     ssl_certificate   cert/xxx.pem;
     ssl_certificate_key  cert/xxx.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
     ssl_prefer_server_ciphers on;


     server_name  xxx;
     #charset koi8-r;
     access_log  /var/log/nginx/xxx.access.log  main;

location / {
    proxy_pass http://xxx;
    proxy_set_header    Host $host;
    proxy_set_header    X-Real-IP $remote_addr;
    proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;
    proxy_redirect off;
    proxy_connect_timeout   150;
    proxy_send_timeout  100;
    proxy_read_timeout  100;
    proxy_buffers       4 32k;
    client_max_body_size    8m;
    client_body_buffer_size 128;
    }

#error_page  404              /404.html;

# redirect server error pages to the static page /50x.html
#
     error_page   500 502 503 504  /50x.html;
     location = /50x.html {
          root   /usr/share/nginx/html;
     }
}