nginx https 443端口配置的方法介绍

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

server {

   listen  443 ssl;

 server_name xxx.com;

     ssl_certificate cert/下载的pem后缀文件;

     ssl_certificate_key cert/下载的key后缀文件;

     ssl_session_timeout 120m;

     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

     ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

     ssl_prefer_server_ciphers on;

     location / {

      proxy_pass http://转发的路径（跟http一致）/;

      #proxy_set_header X-Real-IP $remote_addr;

      #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      #proxy_set_header Host $http_host;

      #proxy_set_header X-NginX-Proxy true;

  #由于nginx的反向代理，所以需要在这里将$remote_addr赋值给某一参数，系统通过该参数获取用户的访问ip,这里直接定义为：WL-Proxy-Client-IP

  proxy_set_header            WL-Proxy-Client-IP $remote_addr;

      proxy_redirect default;   

 }

     error_page   500 502 503 504  /50x.html;

     location = /50x.html {

         root   html;

     }

}