{"title":"Nginx\u5b89\u88c5\u8bc1\u4e66\u6559\u7a0b","content":"<h2 style=\"text-align: start;\">\u670d\u52a1\u5668\u73af\u5883<\/h2><ul><li style=\"text-align: start;\">Web \u670d\u52a1\u5668\uff1aNginx<\/li><\/ul><h2 style=\"text-align: start;\">\u524d\u7f6e\u6761\u4ef6<\/h2><ul><li style=\"text-align: start;\">Nginx 1.10.0 \u6216\u66f4\u9ad8\u7248\u672c<\/li><li style=\"text-align: start;\">\u5df2\u83b7\u53d6 SSL \u8bc1\u4e66\u6587\u4ef6<\/li><li style=\"text-align: start;\">\u5177\u6709\u670d\u52a1\u5668\u7684 root \u6216 sudo \u6743\u9650<\/li><\/ul><h2 style=\"text-align: start;\">\u914d\u7f6e\u793a\u4f8b<\/h2><pre><code >server {\r\n    listen 80;\r\n    listen 443 ssl;\r\n    server_name yourdomain.com;\r\n\r\n    ssl_certificate ssl\/yourdomain.com.crt;\r\n    ssl_certificate_key ssl\/yourdomain.com.key;\r\n\r\n    ssl_protocols TLSv1.2 TLSv1.3;\r\n    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;\r\n    ssl_session_timeout 5m;\r\n    ssl_prefer_server_ciphers on;\r\n\r\n    location \/ {\r\n        root \/usr\/share\/nginx\/html;\r\n        index index.html index.htm;\r\n    }\r\n}<\/code><\/pre><p><br><\/p><p><br><\/p><h2 style=\"text-align: start;\">\u5b89\u88c5\u6b65\u9aa4<\/h2><ol><li style=\"text-align: start;\">\u51c6\u5907\u8bc1\u4e66\u6587\u4ef6\u5728 nginx.conf \u6240\u5728\u7684\u76ee\u5f55\u521b\u5efa ssl \u76ee\u5f55\u4e0a\u4f20\u8bc1\u4e66\u6587\u4ef6\u5230 ssl \u76ee\u5f55<\/li><li style=\"text-align: start;\">\u914d\u7f6e Nginx \u670d\u52a1\u5668\u5757<\/li><\/ol><p style=\"text-align: start;\"><br><\/p><pre><code >server {\r\n     listen 80;\r\n     listen 443 ssl;\r\n     server_name your-domain.com;\r\n\r\n     ssl_certificate ssl\/your-domain.crt;\r\n     ssl_certificate_key ssl\/your-domain.key;\r\n\r\n     # SSL \u914d\u7f6e\u4f18\u5316\r\n     ssl_protocols TLSv1.2 TLSv1.3;\r\n     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;\r\n\r\n     location \/ {\r\n         root \/usr\/share\/nginx\/html;\r\n         index index.html index.htm;\r\n     }\r\n}<\/code><\/pre><p style=\"text-align: start;\"><span style=\"color: rgb(0, 0, 0); font-size: 16px;\">\u6d4b\u8bd5\u914d\u7f6e\u5e76\u91cd\u542f<\/span><\/p><pre><code >nginx -t\r\nsystemctl restart nginx<\/code><\/pre><h2 style=\"text-align: start;\">\u9a8c\u8bc1\u5b89\u88c5<\/h2><ol><li style=\"text-align: start;\">\u68c0\u67e5 Nginx \u72b6\u6001<\/li><li style=\"text-align: start;\">\u4f7f\u7528 https \u8bbf\u95ee<\/li><\/ol><h3 style=\"text-align: start;\">\u914d\u7f6e HTTP \u91cd\u5b9a\u5411<\/h3><p style=\"text-align: start;\">\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\u6dfb\u52a0\u8df3\u8f6c\u4ee3\u7801\uff1a<\/p><p style=\"text-align: start;\"><br><\/p><p><br><\/p><pre><code >server {\r\n    #\u7ad9\u70b9\u548cSSL\u7684\u914d\u7f6e\u4fe1\u606f\u00b7\u00b7\u00b7\r\n\r\n    #\u81ea\u52a8\u8df3\u8f6c\u5230HTTPS(\u548c\u4e0b\u9762\u7684\u90e8\u5206\u57df\u540d\u8df3\u8f6c\u4e0d\u80fd\u540c\u65f6\u4f7f\u7528)\r\n    if ($server_port = 80){\r\n        rewrite ^(\/.*)$ https:\/\/$host$1 permanent;\r\n    }\r\n}<\/code><\/pre><p style=\"text-align: start;\"><br><\/p><pre><code >server {\r\n    #\u7ad9\u70b9\u548cSSL\u7684\u914d\u7f6e\u4fe1\u606f\u00b7\u00b7\u00b7\r\n\r\n    #\u7ed1\u5b9a\u57df\u540d\u8f83\u591a\uff0c\u53ea\u8ba9\u90e8\u5206\u57df\u540d\u8df3\u8f6c(\u6839\u636e\u60c5\u51b5\u9009\u7528\uff0c\u548c\u4e0a\u9762\u7684\u5168\u90e8\u8df3\u8f6c\u4e0d\u80fd\u540c\u65f6\u4f7f\u7528)\r\n    set $redirect_https 1;\r\n    if ($server_port = 80) {\r\n        set $redirect_https \"${redirect_https}2\";\r\n    }\r\n    if ($http_host = 'abc.com') {\r\n        set $redirect_https \"${redirect_https}3\";\r\n    }\r\n    if ($http_host = 'cde.com') {\r\n        set $redirect_https \"${redirect_https}3\";\r\n    }\r\n    if ($redirect_https = \"123\") {\r\n        #\u5f53\u524d\u57df\u540d\u8df3\u8f6c\r\n        rewrite ^(.*)$ https:\/\/$host$1 permanent;\r\n        #\u53ef\u4ee5\u8df3\u8f6c\u5230\u6307\u5b9a\u7684\u57df\u540d\r\n        #rewrite ^(.*)$ https:\/\/www.abcde.com$1 permanent;\r\n    }\r\n}<\/code><\/pre><p style=\"text-align: start;\"><br><\/p><p style=\"text-align: start;\"><br><\/p><p style=\"text-align: start;\"><br><\/p>","updated_at":"2026-06-19 20:46:07"}