Nginx 反向代理https

Nginx 反向代理https

1、代理nginx開啓80，443端口

############################################################################

# cat /etc/nginx/conf.d/nginx_http.conf

        # 設置經過http域名訪問的時候直接跳轉https

server {

    listen 80;

    server_name www.meteor-yu.com;

    rewrite ^/(.*) https://$server_name/$1 permanent;

}

        # 設置不容許IP訪問

server {

   listen 80 default_server;

    server_name _;

    return 403;

}

        # 設置經過http訪問頂級域名meteor-yu.com自動跳轉https訪問www.meteor-yu.com這個域名

server {

   listen 80;

    server_name meteor-yu.com;

    return 301 https://www.meteor-yu.com$request_uri;

}

############################################################################

2、建立自簽名證書

# cat /etc/nginx/conf.d/nginx_https.conf

        # 建立自簽名證書，並添加到配置中

server {

    listen 443;

    server_name www.meteor-yu.com;

    

    ssl on;

    ssl_certificate conf.d/server.crt;

    ssl_certificate_key conf.d/server.key;

    access_log /var/log/nginx/staff_assessing_system_access.log main;

    error_log /var/log/nginx/staff_assessing_system_error.log;

    location / {

        proxy_next_upstream http_502 http_504 error timeout invalid_header;

        proxy_ignore_client_abort on;

        proxy_connect_timeout 60s;

        proxy_read_timeout 5400s;

        proxy_send_timeout 5400s;

        proxy_set_header Host $host;

        proxy_set_header X-Real-IP $remote_addr;

        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_pass http://10.10.10.10:84;   # 轉發到後臺的web端口，這裏是後臺web是84端口，後臺訪問仍然是http

    } 

}

        # 不容許https直接IP訪問

server {

    listen 443 default_server;

    server_name _;

    ssl on;

    ssl_certificate /etc/nginx_ssl/server.crt;

    ssl_certificate_key /etc/nginx_ssl/server.key;

    return 403;

}

        # 設置經過https訪問頂級域名meteor-yu.com自動跳轉到www.meteor-yu.com這個域名

server {

    listen 443;

    ssl on;

    ssl_certificate /etc/nginx_ssl/server.crt;

    ssl_certificate_key /etc/nginx_ssl/server.key;

    server_name meteor-yu.com;

    return 301 https://www.meteor-yu.com$request_uri;

}

############################################################################