82870034 发表于 2018-11-9 06:42:54

nginx https

  ==================================
  server{
  listen       443;
  server_namefarm.gz.1252039095.clb.myqcloud.com;
  ssl                  on;
  ssl_certificate      /etc/pki/tls/certs/1_farm.gz.1252039095.clb.myqcloud.com_bundle.crt;
  ssl_certificate_key/etc/pki/tls/certs/2_farm.gz.1252039095.clb.myqcloud.com.key;
  ssl_session_timeout5m;
  ssl_protocolsSSLv3 TLSv1;
  ssl_ciphersHIGH:!ADH:!EXPORT56:RC4+RSA:+MEDIUM;
  ssl_prefer_server_ciphers   on;
  location ~ .php$ {
  root         /var/www/html;
  fastcgi_pass   127.0.0.1:9000;
  fastcgi_indexindex.php;
  fastcgi_paramSCRIPT_FILENAME$document_root$fastcgi_script_name;
  include      fastcgi_params;
  }
  location / {
  root   /var/www/html;
  indexindex.php index.html index.htm ;
  }
  }
  =============================================================
  server
  {
  listen                  80;

server_name   d1.farm.kuanggame.com;
  

    keepalive_timeout       300;  

  ssl                     on;
  ssl_certificate         /etc/pki/tls/certs/1_d1.farm.kuanggame.com_bundle.crt;
  ssl_certificate_key   /etc/pki/tls/certs/2_d1.farm.kuanggame.com.key;
  ssl_session_timeout   5m;
  ssl_session_cache       shared:SSL:50m;
  ssl_protocols         SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers             ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
  

  location /
  {
  proxy_pass            http://127.0.0.1:8080;
  proxy_http_version      1.1;
  proxy_read_timeout      300;
  proxy_set_header      Upgrade $http_upgrade;
  proxy_set_header      Connection "Upgrade";
  proxy_set_header      X-Real-IP $remote_addr;
  }
  

  }


页: [1]
查看完整版本: nginx https