ngxin forwards port 8080 of the machine to the domain name, forcing the use of https protocol

1. Aliyun server deploys nginx and installs it directly through yum. Here we focus on configuration files. (Modify /etc/nginx/nginx.conf)

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    
    
    worker_connections  1024;
}


http {
    
    
    include       mime.types;
    default_type  application/octet-stream;
    fastcgi_buffers 8 16k;
    fastcgi_buffer_size 32k;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

2 Create a proxy folder (mkdir /etc/nginx/conf.d) and configure the proxy file

    #
    upstream   代理的域名 {
    
    
        server 127.0.0.1:8080;
        keepalive 64;
    }


      
        server {
    
    
                listen 80;
                #listen [::]:80;
                listen 443 ssl http2;
                #listen [::]:443 ssl;
                server_name 代理的域名.com www.代理的域名.com
                ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
                ssl_certificate  /etc/nginx/ssl/生成的证书.pem;
                ssl_certificate_key   /etc/nginx/ssl/生成的证书.key;

        if ($scheme = http) {
    
    
            rewrite ^(.*)$ https://$host$request_uri permanent;
        }



               location   / {
    
    
                 proxy_ignore_client_abort on;
                 proxy_next_upstream http_500 http_502  http_503 http_504  error timeout invalid_header;
                 proxy_http_version 1.1;
                 proxy_set_header Connection "";
                 proxy_set_header Host $host;
                 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                 proxy_set_header X-Real-IP $remote_addr;
                 proxy_send_timeout 18000s;
                 proxy_read_timeout 18000s;
                 proxy_pass http://127.0.0.1:8080;
                # logging
                access_log /var/log/nginx/代理的域名.access.log main;
                error_log /var/log/nginx/**代理的域名**.error.log warn;
                        }

       location ^~ /.well-known/ {
    
    
                root /var/www/example;
            }


        }

3. Verify and reload nginx
nginx -t (no error)
nginx -s reload

4. Alibaba Cloud free certificate reference:
https://freesion.com/article/21531295842/Other
free certificate reference:
https://blog.csdn.net/qq_48804275/article/details/127680805