--- 2020-07-09笔记 ---

壹、HTTP 301 跳转至 HTTPS

server {
    listen 80;
    server_name xxx.com;
    return 301 https://$server_name$request_uri;
}

贰、HTTPS证书配置

server {                                                                                                                 
        listen 443 ssl;
        server_name xxx.com;
        ssl_certificate /data/xx.com.crt;
        ssl_certificate_key /data/xx.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        location / {
                root /data/rongxinservice/sources;
                index  index.html index.htm;
                # 开启目录列表
                autoindex on;
        }
}

叁、开启目录列表

location / {
  # 开启目录列表
  autoindex on;
  root /data/sources;
  index  index.html index.htm;
}

肆、反代虚拟二级目录

例如：
http(s)://a.com:8080/ --> http(s)://b.com/a/
http(s)://a.com:8080/test/ --> http(s)://b.com/test/
http(s)://127.0.0.1:8080/ --> http(s)://b.com
....

-- 方法壹：记得在目录后加上"/"
location /test/ {
  proxy_pass https://xxx.com/;
}
-- 方法贰：使用rewrite（未检验）
location / {
    rewrite /test/(.*) /$1 break;
    proxy_pass http://127.0.0.1;
}