nginx 80端口通过端口转发、重定向访问443端口,即http跳转到https:
一、终端cd到nginx配置文件夹:
$ cd /etc/nginx/conf.d/
二、修改80端口站点配置文件:
$ vim npen-net.conf
方法一:端口转发
server {
listen 80;
server_name npen.net;
location / {
proxy_pass http://localhost:443;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
}
方法二:重定向
server {
listen 80;
server_name npen.net;
rewrite ^(.*)$ https://$host$1 permanent;
}
三、重启nginx服务:
$ systemctl restart nginx
附80/443站点配置:
server {
listen 80;
server_name npen.net;
rewrite ^(.*)$ https://$host$1 permanent;
}
server
{
listen 443;
server_name npen.net;
location / {
index index.html index.htm index.php;
#autoindex on;
if (!-e $request_filename) {
rewrite ^/(.*) /index.php last;
}
}
root "/www/blog/public";
ssl on;
ssl_certificate /ssl/npen-net/npen.net.cer;
ssl_certificate_key /ssl/npen-net/npen.net.key;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
#ssl_session_tickets on;
location ~ \.php(.*)$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
include fastcgi_params;
}
location /logs/ {
root /runtime/;
break;
}
location /bug/ {
if (!-e $request_filename) {
rewrite ^([_0-9a-zA-Z-]+)?(/wp-.*) $2 last;
rewrite ^([_0-9a-zA-Z-]+)?(/.*\.php)$ $2 last;
rewrite ^ /bug/index.php last;
}
}
}