nginx-debug-https.conf 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596
  1. user nginx;
  2. worker_processes 1;
  3. error_log /var/error.log info;
  4. #pid logs/nginx.pid;
  5. worker_rlimit_nofile 1024;
  6. events {
  7. worker_connections 1024;
  8. }
  9. http
  10. {
  11. include mime.types;
  12. default_type application/octet-stream;
  13. fastcgi_buffer_size 32k;
  14. fastcgi_buffers 8 32k;
  15. underscores_in_headers on;
  16. client_max_body_size 1024M;
  17. sendfile on;
  18. keepalive_timeout 65;
  19. log_format main '$remote_addr - $remote_user [$time_local] "$request" '
  20. '$status $body_bytes_sent "$http_referer" '
  21. '"$http_user_agent" "$http_x_forwarded_for"';
  22. server
  23. {
  24. listen 443 ssl;
  25. set $folder_name /var/www/html;
  26. server_name www.xyzshops.cn;
  27. root $folder_name;
  28. ssl_certificate cert/www.xyzshops.cn.pem;
  29. ssl_certificate_key cert/www.xyzshops.cn.key;
  30. ssl_session_cache shared:SSL:1m;
  31. ssl_session_timeout 5m;
  32. ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
  33. ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
  34. ssl_prefer_server_ciphers on;
  35. index index.html index.php;
  36. client_max_body_size 100m;
  37. proxy_connect_timeout 500s;
  38. proxy_read_timeout 500s;
  39. proxy_send_timeout 500s;
  40. fastcgi_connect_timeout 75;
  41. fastcgi_read_timeout 600;
  42. fastcgi_send_timeout 600;
  43. charset utf-8;
  44. location /logs {
  45. deny all;
  46. return 403;
  47. }
  48. location /data/log {
  49. deny all;
  50. return 403;
  51. }
  52. location / {
  53. index index.html index.htm index.php;
  54. }
  55. location /mshop {
  56. root $folder_name;
  57. autoindex on;
  58. index index.html index.htm index.php;
  59. try_files $uri $uri/ /mshop/index.html;
  60. }
  61. location ~ /mobile/[/\w]+\.php$ {
  62. root $folder_name;
  63. fastcgi_pass mobilesrv:9100;
  64. fastcgi_index index.php;
  65. fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
  66. include fastcgi_params;
  67. }
  68. location ~ /mobile/[/\w]+\.html$ {
  69. try_files $uri $uri/ /mobile/index.html;
  70. }
  71. location ~ \.php$ {
  72. add_header Cache-Control no-store;
  73. root $folder_name;
  74. fastcgi_pass fpmsrv:9000;
  75. fastcgi_index index.php;
  76. fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
  77. include fastcgi_params;
  78. }
  79. }
  80. }