nginx配置https，80重定向到443

server {
    listen 443;
    server_name xxl.trc-demo.com;
    ssl on;
    root /code/xxl/admin/public;
    index index.php index.html;
    ssl_certificate  /etc/nginx/conf.d/ssl/xxl.trc-demo.com/1_xxl.trc-demo.com_bundle.pem;
    ssl_certificate_key /etc/nginx/conf.d/ssl/xxl.trc-demo.com/0_xxl.trc-demo.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/var/run/php7-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_connect_timeout        1200; 
        fastcgi_read_timeout            3800; 
        fastcgi_send_timeout            3800; 
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
    }
}
server {
    listen 80;
    server_name  xxl.trc-demo.com;
    rewrite ^(.*)$ https://${server_name}$1 permanent; 

}

免费证书申请:

https://www.bt.cn/admin/safe