From ef901c4f995ce4d2f007436b993520a2463a4454 Mon Sep 17 00:00:00 2001
From: taoshihan1991 <630892807@qq.com>
Date: Tue, 28 Jul 2020 17:42:40 +0800
Subject: [PATCH] =?UTF-8?q?nginx=E9=83=A8=E7=BD=B2https=E7=A4=BA=E4=BE=8B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 readme.md | 39 +++++++++++++++++++++++++++++++--------
 1 file changed, 31 insertions(+), 8 deletions(-)

diff --git a/readme.md b/readme.md
index f363550..1826153 100644
--- a/readme.md
+++ b/readme.md
@@ -63,21 +63,44 @@
 
 ### nginx部署
 
-访问：http://gofly.sopans.com
+访问：https://gofly.sopans.com
 
+参考支持https的部署示例 , 注意反向代理的端口号和证书地址
 
 ```php
 server {
-        listen          80; 
-        server_name  域名;
-        access_log  /var/log/nginx/xxx.access.log  main;
-        location / { 
-                proxy_pass http://127.0.0.1:端口;
+       listen 443 ssl http2;
+        ssl on;
+        ssl_certificate   conf.d/cert/4263285_gofly.sopans.com.pem;
+        ssl_certificate_key  conf.d/cert/4263285_gofly.sopans.com.key;
+        ssl_session_timeout 5m;
+        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        ssl_prefer_server_ciphers on;
+        #listen          80; 
+        server_name  gofly.sopans.com;
+        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
+        location / {
+                proxy_pass http://127.0.0.1:8081;
                     proxy_http_version 1.1;
+                    proxy_set_header X-Real-IP $remote_addr;
                     proxy_set_header Upgrade $http_upgrade;
                     proxy_set_header Connection "upgrade";
-                    proxy_set_header Origin ""; 
-        }   
+                    proxy_set_header Origin "";
+        }
+}
+server{
+       listen 80;
+        server_name  gofly.sopans.com;
+        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
+        location / {
+                proxy_pass http://127.0.0.1:8081;
+                    proxy_http_version 1.1;
+                    proxy_set_header X-Real-IP $remote_addr;
+                    proxy_set_header Upgrade $http_upgrade;
+                    proxy_set_header Connection "upgrade";
+                    proxy_set_header Origin "";
+        }
 }
 ```