1、反向代理全局配置

include mime.types;
default_type application/octet-stream;
client_max_body_size 100m;

keepalive_timeout  65;
proxy_read_timeout 600s;

 

2、http to https

   server {
        listen       80;
        server_name  xx.cn www.xx.cn;
        rewrite ^(.*)$ https://$host$1 permanent;
    }

3、https - vue模板

server {
       listen      443 ssl http2;
       server_name xx.cn www.xx.cn;
       root   /var/www/wwwroot/xx/vue;

       ssl_certificate      /var/www/wwwroot/SSL/www.xx.cn.pem;
       ssl_certificate_key  /var/www/wwwroot/SSL/www.xx.cn.key;
    
       ssl_session_cache    shared:SSL:1m;
       ssl_session_timeout  5m;
    
       ssl_ciphers  HIGH:!aNULL:!MD5;
       ssl_prefer_server_ciphers  on;
    
       location / {
            try_files $uri $uri/ @router;#需要指向下面的@router否则会出现vue的路由在nginx中刷新出现404
            index  index.html index.htm;
        }
    
       location @router {
            rewrite ^.*$ /index.html last;
        }

   }

4、https - webApi模板

server {
        listen       443 ssl http2;
        server_name  api.xx.cn;
        ssl_certificate      /var/www/wwwroot/SSL/api.xx.cn.pem;
        ssl_certificate_key  /var/www/wwwroot/SSL/api.xx.cn.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
    
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
    
         location / {
            proxy_pass http://127.0.0.1:9991;
            proxy_http_version 1.1;
            proxy_set_header Connection "";
            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
         }
    }

 

相关文章: