nginx部署https示例

readme.md

@@ -63,21 +63,44 @@
 
 ### nginx部署
 
-访问：http://gofly.sopans.com
+访问：https://gofly.sopans.com
 
+参考支持https的部署示例 , 注意反向代理的端口号和证书地址
 
 ```php
 server {
-        listen          80; 
-        server_name  域名;
-        access_log  /var/log/nginx/xxx.access.log  main;
-        location / { 
-                proxy_pass http://127.0.0.1:端口;
+       listen 443 ssl http2;
+        ssl on;
+        ssl_certificate   conf.d/cert/4263285_gofly.sopans.com.pem;
+        ssl_certificate_key  conf.d/cert/4263285_gofly.sopans.com.key;
+        ssl_session_timeout 5m;
+        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        ssl_prefer_server_ciphers on;
+        #listen          80; 
+        server_name  gofly.sopans.com;
+        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
+        location / {
+                proxy_pass http://127.0.0.1:8081;
                     proxy_http_version 1.1;
+                    proxy_set_header X-Real-IP $remote_addr;
                     proxy_set_header Upgrade $http_upgrade;
                     proxy_set_header Connection "upgrade";
-                    proxy_set_header Origin ""; 
-        }   
+                    proxy_set_header Origin "";
+        }
+}
+server{
+       listen 80;
+        server_name  gofly.sopans.com;
+        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
+        location / {
+                proxy_pass http://127.0.0.1:8081;
+                    proxy_http_version 1.1;
+                    proxy_set_header X-Real-IP $remote_addr;
+                    proxy_set_header Upgrade $http_upgrade;
+                    proxy_set_header Connection "upgrade";
+                    proxy_set_header Origin "";
+        }
 }
 ```