upstream notify {
server well-notify:8010;
}
server {
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
server_name notify.zxk175.com;
ssl_certificate /opt/openresty/cert/notify.pem;
ssl_certificate_key /opt/openresty/cert/notify.key;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE";
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_stapling on;
ssl_stapling_verify on;
ssl_prefer_server_ciphers on;
resolver 8.8.4.4 8.8.8.8 valid=300s;
resolver_timeout 10s;
location / {
proxy_pass http://notify;
include /opt/openresty/conf/common/proxy.conf;
index index.jsp index.htm index.html;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
}
server {
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
server_name well.zxk175.com;
ssl_certificate /opt/openresty/cert/well.pem;
ssl_certificate_key /opt/openresty/cert/well.key;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE";
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_stapling on;
ssl_stapling_verify on;
ssl_prefer_server_ciphers on;
resolver 8.8.4.4 8.8.8.8 valid=300s;
resolver_timeout 10s;
location / {
proxy_pass https://notify.zxk175.com/;
proxy_set_header Host notify.zxk175.com;
include /opt/openresty/conf/common/proxy-site.conf;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
}
server {
listen 80;
listen [::]:80;
server_name bd.zxk175.com;
location / {
proxy_pass https://www.baidu.com/;
proxy_set_header Host www.baidu.com;
include /opt/openresty/conf/common/proxy-site.conf;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
}