nginx 多域名反向代理

Nginx SSL配置与代理转发实践

最新推荐文章于 2024-09-20 09:00:00 发布

原创最新推荐文章于 2024-09-20 09:00:00 发布 · 951 阅读

1 ·

CC 4.0 BY-SA版权

服务器环境专栏收录该内容

17 篇文章

订阅专栏

本文详细介绍了如何使用Nginx进行HTTPS配置，包括SSL证书的加载及会话缓存设置，并展示了如何为不同子域名配置代理转发规则。此外还提供了高级配置选项，如超时设置和错误处理等。

server {
        listen       443 ssl;
        server_name  A.B;//一级域名
        ssl_certificate      openssl/server.crt;
        ssl_certificate_key  openssl/server.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
				proxy_pass http://127.0.0.1:82/;
				client_max_body_size 50m;

                fastcgi_ignore_client_abort on;
				proxy_store    off;
				proxy_redirect    off;
                proxy_ignore_client_abort on;
                proxy_connect_timeout 300s;
                proxy_read_timeout 300s;
                proxy_send_timeout 300s;
				proxy_next_upstream http_502 http_504 http_404 error timeout invalid_header;
				proxy_set_header Host $host;
                proxy_set_header REMOTE_ADDR $remote_addr;
                proxy_set_header REMOTE-HOST $remote_addr;
                proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }
	
	server {
        listen       443 ssl;
        server_name  fb.A.B;//二级域名
        ssl_certificate      openssl/server.crt;
        ssl_certificate_key  openssl/server.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
				proxy_pass http://127.0.0.1:83/;
				client_max_body_size 50m;

                fastcgi_ignore_client_abort on;
				proxy_store    off;
				proxy_redirect    off;
                proxy_ignore_client_abort on;
                proxy_connect_timeout 300s;
                proxy_read_timeout 300s;
                proxy_send_timeout 300s;
				proxy_next_upstream http_502 http_504 http_404 error timeout invalid_header;
				proxy_set_header Host $host;
                proxy_set_header REMOTE_ADDR $remote_addr;
                proxy_set_header REMOTE-HOST $remote_addr;
                proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }