nginx 一个域名多服务转发 443

偏执的太偏执、 2023-02-25 10:19 15阅读 0赞

# 1.安装nginx (省略)（安装时记得开启ssl）--with-http\_ssl\_module #

# 2.配置nginx #

##    一般默认在 /usr/local/nginx/conf/ 下 ##

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    
        sendfile        on;
        #tcp_nopush     on;
    
        #keepalive_timeout  0;
        keepalive_timeout  65;
    
        #gzip  on;
        #http 80 转发443
        server {
            listen       80;
            server_name  域名;
    
    
            #核心代码
            rewrite ^(.*)$ https://${server_name}$1 permanent;
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
            #location / {
            #   root   html;
            #  index  index.html index.htm;
            #}
    
            #error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
            # error_page   500 502 503 504  /50x.html;
            # location = /50x.html {
            #    root   html;
            #}
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        }
    
    
        # another virtual host using mix of IP-, name-, and port-based configuration
        #
        #server {
        #    listen       8000;
        #    listen       somename:8080;
        #    server_name  somename  alias  another.alias;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
        upstream wxServer1{
           server ip:端口1;
        }
    
        upstream wxServer2{
           server ip:端口2;
        } 
        # HTTPS server
        #
        server {
            listen       443 ssl;
            server_name  域名;
            
            #开启ssl证书认证
            ssl on;
            access_log  /home/cert/access.log;
            keepalive_timeout 60; 
            #证书路径，根据实际情况改写
            ssl_certificate      /home/cert/域名.pem;
            ssl_certificate_key  /home/cert/域名.key;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
            ssl_prefer_server_ciphers on;
            ssl_session_cache    shared:SSL:10m;
            ssl_session_timeout  10m; 
            #禁止在header中出现服务器版本，防止黑客利用版本漏洞攻击
            server_tokens off;
    
    
        #    ssl_ciphers  HIGH:!aNULL:!MD5;
        #    ssl_prefer_server_ciphers  on;
    
            location /pro1 {
                proxy_pass http://wxServer1/;
                #获取真实ip
                proxy_set_header Host $http_host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
            }
    
    
            location /pro2 {
                proxy_pass http://wxServer2/;
            }
        }
    
    }

# 3.其他配置参考自己业务 #