Nginx 简单配置 v1.22

1. SSL 配置

2. http转https配置

3. Nginx代理配置

其中 ssl_certification 和 key 文件的位置： /home/nginx/conf/cert/scs........

location /api 是后台接口，配置在443下也是安全访问后台接口；由于使用代理转发，因此后台接口不需要在云服务器开放；

最后rewrite 是将ttp请求转为https请求

# HTTPS server
    #
    server {
        listen       443 ssl;
        server_name  ***.xyz www.****.xyz;

        ssl_certificate      cert/scs1670833909105_lyincai.xyz_server.crt;
        ssl_certificate_key  cert/scs1670833909105_lyincai.xyz_server.key;

       # ssl_certificate      /home/nginx/ssl/lyincai.xyz_bundle.pem;
       # ssl_certificate_key  /home/nginx/ssl/lyincai.xyz.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
        
        location /api {
                proxy_pass http://localhost:8700;       
        }

    }


    server {
        listen 80;
        server_name ****.xyz www.****.xyz;
        rewrite .* https://$server_name/$1 redirect;
    }