Nginx的详细配置我不具体介绍了,此文章适合对nginx配置有所了解、但不太清楚详细配置的朋友会有所帮助。接下来直接上我的配置文件:
server {
#当有来自外界访问12123端口时
listen 12123 ssl;
charset utf-8;
# 写你的域名
server_name eren.demo.com;
server_tokens off;
#配置证书的地址,可以写相对路径和绝对路径
ssl_certificate cert/demo.crt;
ssl_certificate_key cert/demo.key;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off;
#限制文件传输最大为4G
client_max_body_size 4096m;
location / {
# _ 代表为空
root _;
index _;
#代理到http://192.168.0.1
proxy_pass http://192.168.0.1;
proxy_http_version 1.1;
proxy_buffering off;
proxy_request_buffering off;
#将http请求升级为websocket连接
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
#显示客户端真实IP
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
}
}
网友评论