nginx 配置https反向代理http - mlcy

nginx 配置https反向代理http

nginx 配置
server {
        listen 443 ssl;

        server_name a.test.com;
        ssl_certificate /root/nginx_ssl/a.test.com.crt;
        ssl_certificate_key /root/nginx_ssl/a.test.com.key;

        location /admin {
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header Host $host; 不设置tomcat返回的url地址是127.0.0.1不是a.test.com
                proxy_set_header X-Forwarded-Proto  $scheme;
                proxy_pass http://127.0.0.1:8086;
        }


        location /mch {
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-Proto  $scheme;
                proxy_pass http://127.0.0.1:8087;
        }
        location /notify {
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-Proto  $scheme;
                proxy_pass http://127.0.0.1:8089;
        }
}

此时浏览器访问https://a.test.com/admin的时候返回的URL都是http，而且浏览器https验证不会提示安全和