Nginx HTTPS配置详解-优快云博客

本文链接：https://blog.youkuaiyun.com/Gowind001/article/details/83663527

本文详细介绍了如何使用Nginx进行HTTPS配置，包括监听端口、证书设置、加密套件选择、根目录指定及错误页面处理等关键步骤。通过本文，读者可以了解到Nginx在实现安全连接方面的具体实践。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

做个备份

#server {
#    listen       80;
#    server_name  xxx.xxx.xxx;
#    location / {
#        return 301 https://$host$request_uri;
#    }
#}

server {
    listen       80;
    listen       443 ssl http2 default_server;
    server_name  xxx.xxx.xxx;
    root   /var/www/html;
    index  index.php index.html index.htm;

    ssl_certificate     /etc/ssl/Nginx/server-crt.pem;
    ssl_certificate_key /etc/ssl/Nginx/server-key.pem;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
    }

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        include        fastcgi_params;
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

Nginx的一个简单配置