1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48
| user nginx; worker_processes 1; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid;
events { worker_connections 1024; }
http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; \#tcp_nopush on; keepalive_timeout 65;
\#gzip on; \#include /etc/nginx/conf.d/*.conf; server { listen 443; server_name www.xxx.cn; ssl on; ssl_certificate ./conf.d/1_www.xxx.cn_bundle.crt; ssl_certificate_key ./conf.d/2_www.xxx.cn.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; location / { root /usr/src/blog; index index.html index.htm; } }
server { listen 80; server_name localhost; location / { root /usr/src/blog; index index.html index.htm; rewrite ^(.*) https://$host$1 permanent; // 80端口请求重定向到https } } }
|