|
Nginx反向代理,用的场景非常之多。Nginx反向代理配置可以参见下本博客内容。那么,nginx的SSL反向代理该如何配置呢?SSL配置请站内搜索,这里就不累述了。 修改nginx.conf配置
server {
listen 443 ssl;
server_name www.ttlsa.com;
ssl_certificate ssl/www.ttlsa.com.crt;
ssl_certificate_key ssl/www.ttlsa.com.key;
ssl_prefer_server_ciphers on;
keepalive_timeout 60;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
location / {
proxy_pass http://www.ttlsa.com;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_set_header Accept-Encoding "";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
add_header Front-End-Https on;
proxy_redirect off;
}
}
重启服务# /usr/local/nginx/sbin/nginx -t # /usr/local/nginx/sbin/nginx -s reload(责任编辑:IT) |
