weixin.conf

server {
    listen  80;
    server_name  wx.zxk175.com;

    #禁止IP访问网站
    if ($host != 'wx.zxk175.com') {
        rewrite ^/(.*)$ https://$server_name$1 permanent;
    }

    rewrite ^(.*)$ https://$server_name$1 permanent;
}

server {
    listen  443;
    server_name  wx.zxk175.com;

    ssl on;
    ssl_certificate         /zxk175/nginx/nginx/cert/wx/wx.pem;
    ssl_certificate_key     /zxk175/nginx/nginx/cert/wx/wx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;

    location / {
        proxy_pass http://tomcatserver/wx/;
        include /zxk175/nginx/nginx/conf/conf/proxy.conf;
        root     /zxk175/tale/resources;
        index index.jsp index.htm index.html;
    }

    error_page  404                 /404.html;
    error_page  500 502 503 504 /50x.html;
}