upstream site {
server localhost:85; //apache服务器
server localhost:86;
}
server {
listen 80;
server_name localhost;
return 301 https://$server_name$request_uri; //重写路径
}
server {
listen 443 ssl; //监听443端口 ,所有80转向到443
server_name localhost;
ssl on;
ssl_certificate server.crt; //ssl配置文件
ssl_certificate_key server.key;
# ssl_trusted_certificate /etc/nginx/ssl/example.com/ca-certs.pem;
location / {
proxy_pass http://site; //注意不用https
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
No comments:
Post a Comment