Nginx配置IdentityServer4里的二级目录的配置记录

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;
    #keepalive_timeout  0;
    keepalive_timeout  65;
    #gzip  on;    

    server {
    listen       443 ssl;
    server_name  www.lzgjscc.cn;
    ssl_certificate ..\ssl\8380213_www.lzgjscc.cn.pem;
    ssl_certificate_key ..\ssl\8380213_www.lzgjscc.cn.key;
    ssl_session_timeout 30m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    ssl_ecdh_curve secp384r1;
    ssl_session_cache shared:SSL:50m;
    ssl_session_tickets off;
    ssl_stapling on; #ensure your cert is capable
    ssl_stapling_verify on; #ensure your cert is capable
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 30s;
    #the next four lines of the configuration of nginx.conf is what made MVC Hybrid work correctly after publish:
    proxy_buffer_size   128k;
    proxy_buffers   4 256k;
    proxy_busy_buffers_size   256k;
    large_client_header_buffers 4 16k;

     location / {
    fastcgi_buffers 16 16k;
    fastcgi_buffer_size 32k;
        proxy_pass http://10.10.10.10:10099;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection keep-alive;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;#must be set or wrong url
        proxy_set_header X-Forwarded-Proto $scheme;#must be set or wrong url
        proxy_cache_bypass $http_upgrade;
        proxy_set_header X-URL-SCHEME https;
    }

     location /api/ {
    proxy_pass http://10.10.10.10:9066/;
    proxy_redirect  off;
        proxy_set_header  Host  $host;
        proxy_set_header  X-Real-IP  $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    }
}