linux下配置多域名配置https(http强制跳转https)

1:公司业务需要多域名进行配置https,并且输入http地址需要直接跳转到https中
2:用到的ssl证书是腾讯云的ssl证书,可以直接使用腾讯云
3:ssl_certificate,ssl_certificate_key,是ssl证书的证书秘钥
#user  root;
worker_processes  2;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
 
    server {
	listen 80;
	server_name www.xxx.com;
	rewrite ^(.*) https://$server_name$1 permanent;
    }
    upstream shop_wechat {
	server localhost:8081;   
    }
 
    server {
        listen       443 ssl;
        server_name www.xxx.com;
 
        ssl_certificate      /usr/local/nginx/1_www.xxx.com_bundle.crt;
        ssl_certificate_key  /usr/local/nginx/2_www.xxx.com.key;
		ssl on; 
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
 
        location / {
            proxy_pass http://shop_wechat;
        }
    }
	
    server {
	listen 80;
	server_name www.sss.com;
	rewrite ^(.*) https://$server_name$1 permanent;
    }
    upstream shop_app {
	server localhost:8082;   
    }
 
    server {
        listen       443 ssl;
        server_name  www.fangcuntingche.com;
		ssl on; 
        ssl_certificate      /usr/local/nginx/1_www.sss.com_bundle.crt;
        ssl_certificate_key  /usr/local/nginx/2_www.sss.com.key;
 
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
 
        location / {
            proxy_pass http://shop_app;
        }
    }
}

发布了27 篇原创文章 · 获赞 12 · 访问量 5万+

猜你喜欢

转载自blog.csdn.net/baidu_38226233/article/details/80111392