SSL静态站点反向代理配置

最新推荐文章于 2025-03-23 19:54:11 发布

汪小君

最新推荐文章于 2025-03-23 19:54:11 发布

阅读量539

点赞数

文章标签： ssl 网络协议网络

本文链接：https://blog.youkuaiyun.com/Function_JX_/article/details/121085865

版权

<VirtualHost *:80>
    ServerAdmin webmaster@example.com
    DocumentRoot "/www/wwwroot/m.xxxxx.cn"
    ServerName bdf71372.m.qingclouds.cn
    ServerAlias m.qingclouds.cn
    errorDocument 404 /404.html
    ErrorLog "/www/wwwlogs/m.xxxxx.cn-error_log"
    CustomLog "/www/wwwlogs/m.xxxxx.cn-access_log" combined
    ProxyRequests off
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>
    ProxyPass /api  https://ad.xxxxx.cn/api
    #DENY FILES
     <Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
       Order allow,deny
       Deny from all
    </Files>
    
    #PHP
    <FilesMatch \.php$>
            SetHandler "proxy:unix:/tmp/php-cgi-72.sock|fcgi://localhost"
    </FilesMatch>
    
    #PATH
    <Directory "/www/wwwroot/m.xxxxx.cn">
        SetOutputFilter DEFLATE
        Options FollowSymLinks
        AllowOverride All
        Require all granted
        DirectoryIndex index.php index.html index.htm default.php default.html default.htm
    </Directory>
</VirtualHost>
<VirtualHost *:443>
    ServerAdmin webmasterexample.com
    DocumentRoot "/www/wwwroot/m.xxxxx.cn/"
    ServerName SSL.m.xxxxx.cn
    ServerAlias m.xxxxx.cn 
    errorDocument 404 /404.html
    ErrorLog "/www/wwwlogs/m.xxxxx.cn-error_log"
    CustomLog "/www/wwwlogs/m.xxxxx.cn-access_log" combined
    
    #SSL
    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/m.xxxxx.cn/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/m.xxxxx.cn/privkey.pem
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLProtocol All -SSLv2 -SSLv3
    SSLHonorCipherOrder On
    
    #关键start
    SSLProxyEngine On
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>
    ProxyPass /api  https://ad.xxxxx.cn/api
    #关键end
    
    #PHP
    <FilesMatch \.php$>
            SetHandler "proxy:unix:/tmp/php-cgi-72.sock|fcgi://localhost"
    </FilesMatch>
    
    
    #DENY FILES
     <Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
       Order allow,deny
       Deny from all
    </Files>
    
    #PATH
    <Directory "/www/wwwroot/m.xxxxx.cn/">
        SetOutputFilter DEFLATE
        Options FollowSymLinks
        AllowOverride All
        Require all granted
        DirectoryIndex index.php index.html index.htm default.php default.html default.htm
    </Directory>
</VirtualHost>