nginx参考配置

nginx SSL参考配置

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {

    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    gzip on;
    gzip_min_length 1k;
    gzip_comp_level 9;
    gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_vary on;
    gzip_disable "MSIE [1-6]\.";

    server {
        listen 83;
        listen 81 ssl ;
        server_name  test.cn;
	#https
        ssl_certificate  /usr/local/nginx/cert/test_cn.crt;
        ssl_certificate_key  /usr/local/nginx/cert/test_cn.pem;
		ssl_protocols TLSv1.2 TLSv1.3;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
	client_max_body_size 100m;
    include /usr/local/nginx/conf/proxy/*.conf;
		location ^~ /funeral-service {
			proxy_pass              http://136.34.80.213:9090/funeral-service;
			proxy_set_header        Host 136.34.80.213;
			proxy_set_header        X-Real-IP $remote_addr;
			proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_buffer_size 1024k;
                        proxy_buffers 16 1024k;
                        proxy_busy_buffers_size 2048k;
                        proxy_temp_file_write_size 2048k;
		}

        location / {
            root   html;
            index  index.html index.htm;
			if (!-e $request_filename) {
				rewrite ^(.*)$ /index.html?s=$1 last;
				break;
			}
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

     server {
        listen 80;
        listen 443 ssl ;
        server_name  test.cn;
        ssl_certificate  /usr/local/nginx/cert/test_cn.crt;
        ssl_certificate_key  /usr/local/nginx/cert/test_cn.pem;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
	    client_max_body_size 100m;
        include /usr/local/nginx/conf/proxy/*.conf;
		location ^~ /funeral-service {
			proxy_pass              http://136.34.80.213:9090/funeral-service;
			proxy_set_header        Host 136.34.80.213;
			proxy_set_header        X-Real-IP $remote_addr;
			proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_buffer_size 2024k;
            proxy_buffers 16 1024k;
            proxy_busy_buffers_size 2048k;
            proxy_temp_file_write_size 2048k;
		}

        location / {
            root   html;
            index  index.html index.htm;
			if (!-e $request_filename) {
				rewrite ^(.*)$ /index.html?s=$1 last;
				break;
			}
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

    server {
	    listen 80;
	    listen 443 ssl ;
	    server_name big.test.cn;
	    ssl_certificate  /usr/local/nginx/cert/test_cn.crt;
	    ssl_certificate_key  /usr/local/nginx/cert/test_cn.pem;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	    ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;
            ssl_ciphers  HIGH:!aNULL:!MD5;
            ssl_prefer_server_ciphers  on;
	    client_max_body_size 100m;
            include /usr/local/nginx/conf/proxy/*.conf;
		location ^~ /funeral-service {
			proxy_pass              http://136.34.80.213:9090/funeral-service;
			proxy_set_header        Host 136.34.80.213;
			proxy_set_header        X-Real-IP $remote_addr;
			proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_buffer_size 1024k;
                        proxy_buffers 16 1024k;
			proxy_busy_buffers_size 2048k;
			proxy_temp_file_write_size 2048k;
		}

	    location / {
		root   /usr/local/nginx/big;
		index  index.html index.htm;
	    }
    }

     server {
        listen 84;
        listen 82 ssl ;
        server_name  test.cn;
	#https
        ssl_certificate  /usr/local/nginx/cert/test_cn.crt;
        ssl_certificate_key  /usr/local/nginx/cert/test_cn.pem;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
	client_max_body_size 100m;
    include /usr/local/nginx/conf/proxy/*.conf;
		location ^~ /funeral-service {
			proxy_pass              http://136.34.80.213:9090/funeral-service;
			proxy_set_header        Host 136.34.80.213;
			proxy_set_header        X-Real-IP $remote_addr;
			proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_buffer_size 1024k;
                        proxy_buffers 16 1024k;
                        proxy_busy_buffers_size 2048k;
                        proxy_temp_file_write_size 2048k;
		}

        location / {
            root   /usr/local/nginx/big;
            index  index.html index.htm;
			if (!-e $request_filename) {
				rewrite ^(.*)$ /index.html?s=$1 last;
				break;
			}
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server

#    server {
#        listen       443 ssl;
#        server_name  www.test.cn;
 #       ssl_certificate  /usr/local/nginx/cert/test_cn.crt;
 #       ssl_certificate_key  /usr/local/nginx/cert/test_cn.pem;
 #       ssl_session_cache    shared:SSL:1m;
  #      ssl_session_timeout  5m;
  #      ssl_ciphers  HIGH:!aNULL:!MD5;
  #      ssl_prefer_server_ciphers  on;
     #   ssl_session_cache    shared:SSL:1m;
     #   ssl_session_timeout  5m;
     #  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     #  ssl_ciphers HIGH:!aNULL:!MD5;
     #  ssl_prefer_server_ciphers  on;

    #   location / {
     #       root   html;
     #       index  index.html index.htm;
   #     }
  # }

 }