bbs.weharmonyos.com 的 nginx 配置

turing

1. ##
   
2. # You should look at the following URL's in order to grasp a solid understanding
   
3. # of Nginx configuration files in order to fully unleash the power of Nginx.
   
4. # https://www.nginx.com/resources/wiki/start/
   
5. # https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
   
6. # https://wiki.debian.org/Nginx/DirectoryStructure
   
7. #
   
8. # In most cases, administrators will remove this file from sites-enabled/ and
   
9. # leave it as reference inside of sites-available where it will continue to be
   
10. # updated by the nginx packaging team.
    
11. #
    
12. # This file will automatically load configuration files provided by other
    
13. # applications, such as Drupal or Wordpress. These applications will be made
    
14. # available underneath a path with that package name, such as /drupal8.
    
15. #
    
16. # Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
    
17. ##
    
18. 
    
19. # Default server configuration
    
20. #
    
21. server {
    
22.     #HTTPS的默认访问端口443。
    
23.     #如果未在此处配置HTTPS的默认访问端口，可能会造成Nginx无法启动。
    
24.     listen 443 ssl;
    
25. 
    
26.     #填写证书绑定的域名
    
27.     server_name bbs.weharmonyos.com;
    
28.     index index.html index.htm index.php;
    
29.     root  /home/harmony/www/bbs.weharmonyos.com;
    
30. 
    
31.     #填写证书文件绝对路径
    
32.     ssl_certificate cert/bbs.weharmonyos.com.pem;
    
33.     #填写证书私钥文件绝对路径
    
34.     ssl_certificate_key cert/bbs.weharmonyos.com.key;
    
35. 
    
36.     ssl_session_cache shared:SSL:1m;
    
37.     ssl_session_timeout 5m;
    
38. 
    
39.     #自定义设置使用的TLS协议的类型以及加密套件（以下为配置示例，请您自行评估是否需要配置）
    
40.     #TLS协议版本越高，HTTPS通信的安全性越高，但是相较于低版本TLS协议，高版本TLS协议对浏览器的兼容性较差。
    
41.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    
42.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    
43. 
    
44.     #表示优先使用服务端加密套件。默认开启
    
45.     ssl_prefer_server_ciphers on;
    
46.    
    
47.     #论坛相关配置
    
48.     include ./rewrite/discuzx.conf;
    
49.     include enable-php.conf;
    
50.     location /nginx_status
    
51.     {
    
52.         stub_status on;
    
53.         access_log   off;
    
54.     }
    
55.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    
56.     {
    
57.         expires      30d;
    
58.     }
    
59.     location ~ .*\.(js|css)?$
    
60.     {
    
61.         expires      12h;
    
62.     }
    
63.     location ~ /.well-known {
    
64.         allow all;
    
65.     }
    
66.     location ~ /\.
    
67.     {
    
68.         deny all;
    
69.     }
    
70.     access_log  /home/wwwlogs/access.log;
    
71. }
    
72. server {
    
73.     listen 80;
    
74.     listen [::]:80;
    
75.     #填写证书绑定的域名
    
76.     server_name bbs.weharmonyos.com;
    
77.     #将所有HTTP请求通过rewrite指令重定向到HTTPS。
    
78.     rewrite ^(.*)$ https://$host$1;
    
79.     location / {
    
80.         index index.html index.htm index.php;
    
81.     }
    
82. }

复制代码