xyzshop/docker/conf/nginx/nginx-xyz-https.conf

user nginx;
worker_processes  8;
error_log   /var/error.log  info;
worker_rlimit_nofile 10240;

events {
    worker_connections  8192;
    multi_accept on;
    use epoll;
}

http 
{
    include       mime.types;
    default_type  application/octet-stream;
    fastcgi_buffer_size 32k;
    fastcgi_buffers 8 32k;
    underscores_in_headers on;
    client_max_body_size 1024M;

    sendfile            on;
    keepalive_timeout   65;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    server
    {
        listen       443 ssl;
        set  $folder_name /var/www/html;
        server_name www.xyzshops.cn;
        root $folder_name;

        ssl_certificate      cert/www.xyzshops.cn.pem;
        ssl_certificate_key  cert/www.xyzshops.cn.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
        ssl_prefer_server_ciphers on;

        index index.html index.php;
        client_max_body_size 100m;
        proxy_connect_timeout 500s;
        proxy_read_timeout 500s;
        proxy_send_timeout 500s;
        fastcgi_connect_timeout 75;
        fastcgi_read_timeout 600;
        fastcgi_send_timeout 600;

        charset utf-8;

        location /logs {
            deny all;
            return 403;
        }

        location /data/log {
            deny all;
            return 403;
        }
        location / {
            index  index.html index.htm index.php;
        }

        location /mshop {
            root $folder_name;
            autoindex on;
            index  index.html index.htm index.php;
            try_files $uri $uri/ /mshop/index.html;
        }

        location /plot {
            root $folder_name;
            proxy_pass         http://172.26.105.127:5000;
              proxy_redirect     off;

            proxy_set_header   Host                 $host;
            proxy_set_header   X-Real-IP            $remote_addr;
            proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
            proxy_set_header   X-Forwarded-Proto    $scheme;
        }

        location /merchant {
            root $folder_name;
            autoindex on;
            index  index.html index.htm index.php;
            try_files $uri $uri/ /merchant/index.html;
        }
        location ~ /mobile/[/\w]+\.php$ {
            root           $folder_name;
            fastcgi_pass   docker.hostip:9100;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            fastcgi_param  SIGN $http_sign;
            include fastcgi_params;
        }

        location ~ /mobile/[/\w]+\.html$ {
            try_files $uri $uri/ /mobile/index.html;
        }

        location ~ /racc/[/\w]+\.php$ {
            root           $folder_name;
            fastcgi_pass   docker.hostip:9101;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            fastcgi_param  SIGN $http_sign;
            include fastcgi_params;
        }

        location ~ /mchsrv/[/\w]+\.php$ {
            root           $folder_name;
            fastcgi_pass   docker.hostip:9102;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            fastcgi_param SIGN $http_sign;
            include fastcgi_params;
        }

        location ~ \.php$ {
            add_header Cache-Control no-store;
            root           $folder_name;
            fastcgi_pass   docker.hostip:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            include        fastcgi_params;
        }
    }

    server
        {
            listen       443 ssl;
            set  $folder_name /var/www/html;
            server_name xyzshops.cn;
            root $folder_name;

            ssl_certificate      cert/www.xyzshops.cn.pem;
            ssl_certificate_key  cert/www.xyzshops.cn.key;

            ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;

            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
            ssl_prefer_server_ciphers on;

            index index.html index.php;
            client_max_body_size 100m;
            proxy_connect_timeout 500s;
            proxy_read_timeout 500s;
            proxy_send_timeout 500s;
            fastcgi_connect_timeout 75;
            fastcgi_read_timeout 600;
            fastcgi_send_timeout 600;

            charset utf-8;

            location /logs {
                deny all;
                return 403;
            }

            location /data/log {
                deny all;
                return 403;
            }
            location / {
                index  index.html index.htm index.php;
            }

            location /mshop {
                root $folder_name;
                autoindex on;
                index  index.html index.htm index.php;
                try_files $uri $uri/ /mshop/index.html;
            }

            location /plot {
                root $folder_name;
                proxy_pass         http://172.26.105.127:5000;
                  proxy_redirect     off;

                proxy_set_header   Host                 $host;
                proxy_set_header   X-Real-IP            $remote_addr;
                proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
                proxy_set_header   X-Forwarded-Proto    $scheme;
            }

            location /merchant {
                root $folder_name;
                autoindex on;
                index  index.html index.htm index.php;
                try_files $uri $uri/ /merchant/index.html;
            }
            location ~ /mobile/[/\w]+\.php$ {
                root           $folder_name;
                fastcgi_pass   docker.hostip:9100;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
                fastcgi_param  SIGN $http_sign;
                include fastcgi_params;
            }

            location ~ /mobile/[/\w]+\.html$ {
                try_files $uri $uri/ /mobile/index.html;
            }

            location ~ /racc/[/\w]+\.php$ {
                root           $folder_name;
                fastcgi_pass   docker.hostip:9101;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
                fastcgi_param  SIGN $http_sign;
                include fastcgi_params;
            }

            location ~ /mchsrv/[/\w]+\.php$ {
                root           $folder_name;
                fastcgi_pass   docker.hostip:9102;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
                fastcgi_param SIGN $http_sign;
                include fastcgi_params;
            }

            location ~ \.php$ {
                add_header Cache-Control no-store;
                root           $folder_name;
                fastcgi_pass   docker.hostip:9000;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
                include        fastcgi_params;
            }
        }

    server
        {
            listen       80;
            set  $folder_name /var/www/html;
            server_name 121.89.223.81;
            root $folder_name;

            index index.html index.php;
            client_max_body_size 100m;
            proxy_connect_timeout 500s;
            proxy_read_timeout 500s;
            proxy_send_timeout 500s;
            fastcgi_connect_timeout 75;
            fastcgi_read_timeout 600;
            fastcgi_send_timeout 600;

            charset utf-8;

            location /logs {
                deny all;
                return 403;
            }

            location /data/log {
                deny all;
                return 403;
            }
            location / {
                index  index.html index.htm index.php;
            }

            location ~ \.php$ {
                add_header Cache-Control no-store;
                root           $folder_name;
                fastcgi_pass   docker.hostip:9000;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
                include        fastcgi_params;
            }
        }
}