https nginx 설정

https nginx 설정
  • https 에서 두 개의 파일 을 설정 하려 면 sslcertificate /data/org/2197365_www.beif.org.cn.pem; ssl_certificate_key /data/org/2197365_www.beif.org.cn.key;
  • location 설정 중 alias
  • 여러 포트 를 설정 할 때 하위 프로필 간 포트 가 충돌 할 수 없습니다. 그렇지 않 으 면 설정 이 잘못 되 지 않 지만 nginx 는 404
  • 에 접근 할 것 입 니 다.
    # For more information on configuration, see:
    #   * Official English Documentation: http://nginx.org/en/docs/
    #   * Official Russian Documentation: http://nginx.org/ru/docs/
    
    user nginx;
    worker_processes auto;
    error_log /var/log/nginx/error.log;
    pid /run/nginx.pid;
    
    # Load dynamic modules. See /usr/share/nginx/README.dynamic.
    include /usr/share/nginx/modules/*.conf;
    
    events {
        worker_connections 1024;
    }
    
    http {
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
        access_log  /var/log/nginx/access.log  main;
    
        sendfile            on;
        tcp_nopush          on;
        tcp_nodelay         on;
        keepalive_timeout   65;
        types_hash_max_size 2048;
    
        include             /etc/nginx/mime.types;
        default_type        application/octet-stream;
    
        # Load modular configuration files from the /etc/nginx/conf.d directory.
        # See http://nginx.org/en/docs/ngx_core_module.html#include
        # for more information.
        
        include /etc/nginx/conf.d/*.conf;
        
        #include /etc/nginx/vhosts/*;
        #include /etc/nginx/nginx.conf;
       
         server {
            listen       80 default_server;
            listen       [::]:80 default_server;
            server_name  localhost;
            root         /usr/share/nginx/html;
    
            # Load configuration files for the default server block.
            #include /etc/nginx/default.d/*.conf;
    
            location /api {
               proxy_pass http://localhost:8082;
               proxy_set_header X-Real_IP $remote_addr;
               proxy_set_header Host $host;
               proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
               proxy_http_version 1.1;
               proxy_set_header Upgrade $http_upgrade;
               proxy_set_header Connection 'upgrade';
            }
    
            location /admin {
    	      root   /data/www;
    	      index  index.html index.htm;
            } 
            
            location /img {
                  root   /data/www;
                  index  index.html index.htm;
            }
            
            error_page 404 /404.html;
                location = /40x.html {
            }
    
            error_page 500 502 503 504 /50x.html;
                location = /50x.html {
            }
        }
    
        server {
            listen       443 ssl;
            server_name  localhost;
    
            ssl_certificate      /data/org/2197365_www.beif.org.cn.pem;
            ssl_certificate_key  /data/org/2197365_www.beif.org.cn.key;
    
            ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;
    
            ssl_ciphers  HIGH:!aNULL:!MD5;
            ssl_prefer_server_ciphers  on;
    
    	location /api {
               proxy_pass http://127.0.0.1:8082;
               proxy_set_header X-Real_IP $remote_addr;
               proxy_set_header Host $host;
               proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
               proxy_http_version 1.1;
               proxy_set_header Upgrade $http_upgrade;
               proxy_set_header Connection 'upgrade';            
            }
    
    	location /admin {
                alias  /data/www/admin;
                index  index.html index.htm;
            }
    
            location /img {
                alias  /data/www/img;
                index  index.html index.htm;
            }
    
         }
    
        
    
    # Settings for a TLS enabled server.
    #
    #    server {
    #        listen       443 ssl http2 default_server;
    #        listen       [::]:443 ssl http2 default_server;
    #        server_name  _;
    #        root         /usr/share/nginx/html;
    #
    #        ssl_certificate "/etc/pki/nginx/server.crt";
    #        ssl_certificate_key "/etc/pki/nginx/private/server.key";
    #        ssl_session_cache shared:SSL:1m;
    #        ssl_session_timeout  10m;
    #        ssl_ciphers HIGH:!aNULL:!MD5;
    #        ssl_prefer_server_ciphers on;
    #
    #        # Load configuration files for the default server block.
    #        include /etc/nginx/default.d/*.conf;
    #
    #        location / {
    #        }
    #
    #        error_page 404 /404.html;
    #            location = /40x.html {
    #        }
    #
    #        error_page 500 502 503 504 /50x.html;
    #            location = /50x.html {
    #        }
    #    }
    }
    
    
    

    좋은 웹페이지 즐겨찾기