windows server下的 Nginx SSL 证书安装部署

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;
    keepalive_timeout  65;
    gzip  on;
    server {
	    listen 443 ssl;
	    #填写绑定证书的域名
	    server_name chenxxx.com;
	    charset      utf-8;
	    client_max_body_size 5G; # 突破上传大文件限制
	    #证书文件名称
	    ssl_certificate  1_chenxxx.com_bundle.crt; 
	    #私钥文件名称
	    ssl_certificate_key 2_chenxxx.com.key; 
	    ssl_session_timeout 5m;
	    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
	    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	    ssl_prefer_server_ciphers on;	

        location / {
            root   html;
            index  index.html index.htm;
        }

	    location /ccblog {
            alias   html/front-project/ccblog/;
	        index   index.html;
	        try_files $uri $uri/ /front-project/ccblog/index.html;
        }

	    #后台springboot接口服务代理
	    location /api/ {
	        proxy_pass		http://127.0.0.1:3000/;
	        #后端部署上线后的地址，注意端口后面的'/'要加上，不然会404
	        proxy_set_header	X-Real-IP $remote_addr;
	        proxy_set_header	X-Forwarded-For $proxy_add_x_forwarded_for;
	        proxy_set_header	Host $http_host;
	        proxy_set_header	X-NginX-Proxy true;
	        proxy_redirect	off;
       }

       error_page  404              /404.html;
       error_page   500 502 503 504  /50x.html;
       location = /50x.html {
            root   html;
       }
    }
    server {
	    listen 80;
	    #填写绑定证书的域名
	    server_name chenxxx.com; 
	    #把http的域名请求转成https
	    rewrite ^(.*)$ https://$host$1   permanent;
    }
}