user nginx; worker_processes 1; error_log /var/error.log info; worker_rlimit_nofile 1024; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; fastcgi_buffer_size 32k; fastcgi_buffers 8 32k; underscores_in_headers on; client_max_body_size 1024M; sendfile on; keepalive_timeout 65; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; server { listen 443 ssl; set $folder_name /var/www/html; server_name www.xyzshops.cn; root $folder_name; ssl_certificate cert/www.xyzshops.cn.pem; ssl_certificate_key cert/www.xyzshops.cn.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。 ssl_prefer_server_ciphers on; index index.html Index.php; client_max_body_size 100m; proxy_connect_timeout 500s; proxy_read_timeout 500s; proxy_send_timeout 500s; fastcgi_connect_timeout 75; fastcgi_read_timeout 600; fastcgi_send_timeout 600; charset utf-8; location /logs { deny all; return 403; } location /data/log { deny all; return 403; } location / { index index.html index.htm Index.php; } location /mshop { root $folder_name; autoindex on; index index.html index.htm Index.php; try_files $uri $uri/ /mshop/index.html; } location ~ /mobile/[/\w]+\.php$ { root $folder_name; fastcgi_pass mobilesrv:9100; fastcgi_index Index.php; fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name; include fastcgi_params; } location ~ /mobile/[/\w]+\.html$ { try_files $uri $uri/ /mobile/index.html; } location ~ \.php$ { add_header Cache-Control no-store; root $folder_name; fastcgi_pass fpmsrv:9000; fastcgi_index Index.php; fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name; include fastcgi_params; } } }