weharmonyos.com 的 nginx 配置

turing

1. ##
   
2. # You should look at the following URL's in order to grasp a solid understanding
   
3. # of Nginx configuration files in order to fully unleash the power of Nginx.
   
4. # https://www.nginx.com/resources/wiki/start/
   
5. # https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
   
6. # https://wiki.debian.org/Nginx/DirectoryStructure
   
7. #
   
8. # In most cases, administrators will remove this file from sites-enabled/ and
   
9. # leave it as reference inside of sites-available where it will continue to be
   
10. # updated by the nginx packaging team.
    
11. #
    
12. # This file will automatically load configuration files provided by other
    
13. # applications, such as Drupal or Wordpress. These applications will be made
    
14. # available underneath a path with that package name, such as /drupal8.
    
15. #
    
16. # Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
    
17. ##
    
18. 
    
19. # Default server configuration
    
20. #
    
21. server {
    
22.      #HTTPS的默认访问端口443。
    
23.      #如果未在此处配置HTTPS的默认访问端口，可能会造成Nginx无法启动。
    
24.      listen 443 ssl;
    
25.      
    
26.      #填写证书绑定的域名
    
27.      server_name weharmonyos.com www.weharmonyos.com;
    
28. 
    
29.      #填写证书文件绝对路径
    
30.      ssl_certificate cert/weharmonyos.com.pem;
    
31.      #填写证书私钥文件绝对路径
    
32.      ssl_certificate_key cert/weharmonyos.com.key;
    
33. 
    
34.      ssl_session_cache shared:SSL:1m;
    
35.      ssl_session_timeout 5m;
    
36.          
    
37.      #自定义设置使用的TLS协议的类型以及加密套件（以下为配置示例，请您自行评估是否需要配置）
    
38.      #TLS协议版本越高，HTTPS通信的安全性越高，但是相较于低版本TLS协议，高版本TLS协议对浏览器的兼容性较差。
    
39.      ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    
40.      ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    
41. 
    
42.      #表示优先使用服务端加密套件。默认开启
    
43.      ssl_prefer_server_ciphers on;
    
44. 
    
45. 
    
46.     location / {
    
47.             root /home/harmony/www/weharmonyos.com;
    
48.             index index.html index.htm;
    
49.     }
    
50.     location ~*\.(js|html|gif|jpg|jpeg|png|css|ico) {
    
51.             #proxy_cache  cache_one;
    
52.             proxy_cache_key "$host:$server_port$request_uri";
    
53.             #proxy_set_header Host $host;
    
54.             #proxy_set_header X-Forwarded-For $remote_addr;
    
55.             proxy_cache_valid  200 48h;
    
56.             add_header X-Cache $upstream_cache_status;
    
57.     }
    
58. }
    
59. server {
    
60.     listen 80;
    
61.     listen [::]:80;
    
62.     #填写证书绑定的域名
    
63.     server_name weharmonyos.com www.weharmonyos.com;
    
64.     #将所有HTTP请求通过rewrite指令重定向到HTTPS。
    
65.     rewrite ^(.*)$ https://$host$1;
    
66.     location / {
    
67.         index index.html index.htm;
    
68.     }
    
69. }

复制代码