nginx https 配置

Posted 2021-06-15 oldwei

nginx配置https

server {
        listen       80;
        listen  443 ssl;
        server_name  lan.oldwei.com;
        client_max_body_size 2000M;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;
        location / {
            proxy_pass http://127.0.0.1:8080;
        }


        ssl_certificate    cert/lan/fullchain.pem;
        ssl_certificate_key    cert/lan/privkey.pem;
        ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        add_header Strict-Transport-Security "max-age=31536000";
        error_page 497  https://$host$request_uri;
    }