nginx + https 证书

1、监听 80端口，进行重定向跳转到 https

2、监听443，进入正常项目

3、将 https 证书放至 nginx/conf 文件夹下

#user  nobody;

worker_processes  4;
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
#pid        logs/nginx.pid;

events {
    worker_connections  10240;
}

http {

include       mime.types;

default_type  application/octet-stream;
client_header_buffer_size  32k;
large_client_header_buffers  4  32K;
client_body_buffer_size 512k; 
#设置客户端能够上传的文件大小 
client_max_body_size 1024M;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;
    #gzip  on;


    upstream tzysdk1 {
        #weigth参数表示权值，权值越高被分配到的几率越大 ------ 官网
        #开启ip锁定
        #ip_hash;
        server 127.0.0.1:8081  weight=1;
        #server 127.0.0.1:8080  weight=1;
    }

server {

listen       80;
server_name  wx.9tfvip.com;
#charset koi8-r;
charset utf-8;
rewrite ^ https://$host$request_uri? permanent;

}

server {

listen       80;
server_name  user.9tfvip.com;
#charset koi8-r;
charset utf-8;
rewrite ^ https://$host$request_uri? permanent;
}
server {
listen       80;
server_name  admin.9tfvip.com;
#charset koi8-r;
charset utf-8;
rewrite ^ https://$host$request_uri? permanent;
}
    server {
        listen       443;
        server_name  wx.9tfvip.com;
        ssl on;
        ssl_certificate     STAR.9tfvip.com.crt;
ssl_certificate_key STAR.9tfvip.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

        location / {
            index index_index.do;   #定义首页索引文件的名称
            proxy_pass   http://tzysdk1;
            #proxy_redirect default;
proxy_set_header Host $host:$server_port;
proxy_set_header XReal-IP $remote_addr;
proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto  $scheme;
proxy_connect_timeout 10;
client_max_body_size 20m;
        }
        location /upload/ {
root   html;
index  index.html index.htm;
proxy_pass http://127.0.0.1:8090/tzysdk/upload/;
#proxy_redirect default;
proxy_set_header Host $host:$server_port;
proxy_set_header XReal-IP $remote_addr;
proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for; 
proxy_set_header X-Forwarded-Proto  $scheme;
proxy_connect_timeout 10;
client_max_body_size 20m;
}

location = /error.png {
alias E:/soft/nginx-1.9.12/html/error.png;
}
        error_page   500 502 503 504  /error.html;
        location = /error.html {
            root   html;
        }
    }
    
}