1、反向代理全局配置
include mime.types; default_type application/octet-stream; client_max_body_size 100m; keepalive_timeout 65; proxy_read_timeout 600s;
2、http to https
server { listen 80; server_name xx.cn www.xx.cn; rewrite ^(.*)$ https://$host$1 permanent; }
3、https - vue模板
server { listen 443 ssl http2; server_name xx.cn www.xx.cn; root /var/www/wwwroot/xx/vue; ssl_certificate /var/www/wwwroot/SSL/www.xx.cn.pem; ssl_certificate_key /var/www/wwwroot/SSL/www.xx.cn.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { try_files $uri $uri/ @router;#需要指向下面的@router否则会出现vue的路由在nginx中刷新出现404 index index.html index.htm; } location @router { rewrite ^.*$ /index.html last; } }
4、https - webApi模板
server { listen 443 ssl http2; server_name api.xx.cn; ssl_certificate /var/www/wwwroot/SSL/api.xx.cn.pem; ssl_certificate_key /var/www/wwwroot/SSL/api.xx.cn.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { proxy_pass http://127.0.0.1:9991; proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } }