VPS侦探论坛

标题: lnmpa下如何http强制跳转到https？？ [打印本页]

作者: vvx.cc 时间: 2017-6-4 10:58
标题: lnmpa下如何http强制跳转到https？？
军哥，如题！已经安装最新版1.4

[ 本帖最后由 vvx.cc 于 2017-6-4 11:26 编辑 ]

作者: licess 时间: 2017-6-4 13:15
提问前先论坛搜索

https://lnmp.org/faq/lnmp-nginx-301-rewrite.html

作者: vvx.cc 时间: 2017-6-4 17:32
标题: 回复 2# 的帖子
server
{
      listen 80;
      #listen [::]:80;
      server_name www.vvx.cc vvx.cc;
      index index.html index.htm index.php default.html default.htm default.php;
      root  /home/wwwroot/www.vvx.cc;

      #error_page 404 /404.html;

      # Deny access to PHP files in specific directory
      #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

      include proxy-pass-php.conf;

      location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
      {
         expires    30d;
      }

      location ~ .*\.(js|css)?$
      {
         expires    12h;
      }

      location ~ /.well-known {
         allow all;
      }

      location ~ /\.
      {
         deny all;
      }

      access_log  /home/wwwlogs/www.vvx.cc.log;
}

server
{
      listen 443 ssl http2;
      #listen [::]:443 ssl http2;
      server_name www.vvx.cc vvx.cc;
      index index.html index.htm index.php default.html default.htm default.php;
      root  /home/wwwroot/www.vvx.cc;
      ssl on;
      ssl_certificate /etc/letsencrypt/live/www.vvx.cc/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/www.vvx.cc/privkey.pem;
      ssl_session_timeout 5m;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      ssl_prefer_server_ciphers on;
      ssl_ciphers "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
      ssl_session_cache builtin:1000 shared:SSL:10m;
      # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
      ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

      #error_page 404 /404.html;

      # Deny access to PHP files in specific directory
      #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

      include proxy-pass-php.conf;

      location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
      {
         expires    30d;
      }

      location ~ .*\.(js|css)?$
      {
         expires    12h;
      }

      location ~ /.well-known {
         allow all;
      }

      location ~ /\.
      {
         deny all;
      }

      access_log  /home/wwwlogs/www.vvx.cc.log;
}

欢迎光临 VPS侦探论坛 (https://bbs.lnmp.com/)