nginx 配置https访问

超、凢脫俗 2021-12-19 02:27 412阅读 0赞

server {
     listen 443;
     server_name ssl.17byh.com;
     ssl on;
     ssl_certificate sslkey/1_ssl.17byh.com_bundle.crt;
     ssl_certificate_key sslkey/2_ssl.17byh.com.key;
     ssl_session_timeout 5m;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     #ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    
        access_log /data/wwwlogs/access_nginx_ssl.17byh.com.log combined;
        root /mnt/www/plist_www;
        index index.html index.htm index.php;
    
        include rewrite/thinkphp.conf;
    
        location /nginx_status {
          stub_status on;
          access_log off;
          allow 127.0.0.1;
          deny all;
        }
    
        location ~ index\.php(/|$) {
          #fastcgi_pass remote_php_ip:9000;
          fastcgi_pass unix:/dev/shm/php-cgi.sock;
          fastcgi_index index.php;
                fastcgi_split_path_info  ^(.+index\.php)(/.*)$;
          fastcgi_param  PATH_INFO $fastcgi_path_info;
          include fastcgi.conf;
        }
        location ~ admin\.php(/|$) {
          #fastcgi_pass remote_php_ip:9000;
          fastcgi_pass unix:/dev/shm/php-cgi.sock;
          fastcgi_index admin.php;
          fastcgi_split_path_info  ^(.+admin\.php)(/.*)$;
          fastcgi_param  PATH_INFO $fastcgi_path_info;
          try_files $uri $uri/ /admin.php?s=$fastcgi_path_info;
          include fastcgi.conf;
        }
        location ~ [^/]\.php(/|$) {
            #default_type    text/plain;
            #return 502 "服务正在升级，请稍后再试……";
            deny all;
    	#allow all;
        }
    
        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
            expires 30d;
            access_log off;
        }
    
        location ~ .*\.(js|css)?$ {
            expires 7d;
            access_log off;
        }
    
        location ~ /\.ht {
            deny all;
        }
     }