Nginx配置备忘1

Nginx配置文件备忘

#开启nginx前确保80、443端口没被占用，sqlserver的report服务会占用80端口，需要停掉或者换成其他端口号
#nginx开启https，被代理的iis站点可以不开，外部访问显示还是https
#登录腾讯的DNSPOD在线申请SSL证书，发放的是个证书包。里面各种类型都有，阿里、网易也有类似服务
#不明白的时候看官方文档比什么都好使

worker_processes  1;

error_log  logs/error.log;

events {

worker_connections  1024;

}

 

http {

 

sendfile on;

keepalive_timeout  600s;

client_max_body_size 2000m;

send_timeout 6000s;

gzip on;

gzip_static on;

gzip_proxied any;

gzip_min_length 1024;

gzip_buffers 4 16k;

gzip_comp_level 3;

gzip_types text/htm text/plain text/css application/x-javascript application/xml;

gzip_vary on;

 

server {

listen 80;

server_name  XXXXX.com www.XXXXX.com;

 

location /{

proxy_pass http://www.XXXXX.com:81;

}

 

}

 

 

server {

 

listen 443 ssl;

ssl on;

ssl_certificate     1_XXXXX.com_bundle.crt;

ssl_certificate_key 2_XXXXX.com.key;

 

ssl_session_timeout 5m; 

ssl_protocols TLSv1 TlSv1.1 TLSv1.2;

ssl_ciphers SM2-WITH-SMS4-SM3:ECDH:AESGCM:HIGH:MEDIUM:!RC4:!DH:!MD5:!aNULL:!eNULL; 

ssl_prefer_server_ciphers on;

server_name  XXXXX.com  www.XXXXX.com;

 

location /{

#proxy_pass https://www.XXXXX.com:82;

 proxy_pass http://www.XXXXX.com:81;

}

 

}

 

 

server {

listen 8080;

 

proxy_set_header  Host $host;

proxy_set_header  X-Real-IP $remote_addr;

proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;

charset utf-8;

 

location /tplus/touch/ {

    root   html;

    index  index.html;

 

    try_files $uri  /tplus/touch/index.html;

}

 

 

access_log  logs/host.access.log main;

rewrite ^/(.*)/v2/dist/(.*)$ /$1/v2/dist/$2 break;

rewrite ^/(.*)/v2 /$1/v2/index.html break;

rewrite ^/([0-9a-zA-Z]+)/(.*)\.(gif|jpg|jpeg|png|css|js|ico|htm|html|xml|zip)$ /_html/$2.$3 last;

rewrite ^/favicon.ico /_html/favicon.ico last;

rewrite ^/([0-9a-zA-Z]+)$ /301.html last;

 

location ~ .*\.config {

return 404;

}

 

location /_html {

location ~ .*\.config

{

return 404;

}

alias ../../website;

#expires 30d;  

}

 

location /_lgs {

alias ../../appserver/logs;

}

 

rewrite ^/(.*)/ScriptResource.axd /html last;

 

rewrite ^/([0-9a-zA-Z]+)/([0-9a-zA-Z]+)/$ /$1/tenant.html last;

rewrite ^/([0-9a-zA-Z]+)/([0-9a-zA-Z]+)$ /$1/tenant.html last;

include       *.conf;

 

error_page   500 502 503 504  /50x.html;

location = /50x.html {

root   ../nginx/html;

}

location = /301.html {

root   ../nginx/html;

}

}

}