nginx下启用的https
user www-data;
worker_processes 4;
pid /run/nginx.pid;
events {
worker_connections 768;multi_accept on;
}
http {
Basic Settings
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;server_tokens off;
server_names_hash_bucket_size 64;
server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
Logging Settings
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
Gzip Settings
gzip on;
gzip_disable “msie6”;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
nginx-naxsi config
Uncomment it if you installed nginx-naxsi
#include /etc/nginx/naxsi_core.rules;
nginx-passenger config
Uncomment it if you installed nginx-passenger
#passenger_root /usr;
#passenger_ruby /usr/bin/ruby;
Virtual Host Configs
include /etc/nginx/conf.d/.conf;
include /etc/nginx/sites-enabled/;
server {
listen 80;
server_name /外网域名;
rewrite ^(.*)$ https://外网域名/ permanent;
}
server {
listen 443;
ssl on;
ssl_certificate /home/ubuntu/qq.crt;
ssl_certificate_key /home/ubuntu/qq.key;
server_name /外网域名;
proxy_set_header X-Forwarded-For $remote_addr;
location / {
fastcgi_pass 127.0.0.1:8000;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_script_name;
fastcgi_param SERVER_PROTOCOL $server_protocol; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param SERVER_ADDR $server_addr; fastcgi_param SERVER_PORT $server_port; fastcgi_param SERVER_NAME $server_name; fastcgi_param HTTPS on; fastcgi_param HTTP_SCHEME https;
access_log /var/log/nginx/seahub.access.log; error_log /var/log/nginx/seahub.error.log; } location /seafhttp { rewrite ^/seafhttp(.*)$ $1 break; proxy_pass http://127.0.0.1:8082; client_max_body_size 0; proxy_connect_timeout 36000s; proxy_read_timeout 36000s; } location /media { root /opt/seafile/seafile-server-latest/seahub; } }
}