xyzshop/docker/conf/nginx/nginx-xyz-https.conf

user nginx;
worker_processes  8;
error_log   /var/error.log  info;
worker_rlimit_nofile 10240;

events {
    worker_connections  8192;
    multi_accept on;
    use epoll;
}

http 
{
    include       mime.types;
    default_type  application/octet-stream;
    fastcgi_buffer_size 32k;
    fastcgi_buffers 8 32k;
    underscores_in_headers on;
    client_max_body_size 1024M;

    sendfile            on;
    keepalive_timeout   65;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    server
    {
        listen       443 ssl;
        set  $folder_name /var/www/html;
        server_name www.xyzshops.cn;
        root $folder_name;

        ssl_certificate      cert/www.xyzshops.cn.pem;
        ssl_certificate_key  cert/www.xyzshops.cn.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
        ssl_prefer_server_ciphers on;

        index index.html index.php;
        client_max_body_size 100m;
        proxy_connect_timeout 500s;
        proxy_read_timeout 500s;
        proxy_send_timeout 500s;
        fastcgi_connect_timeout 75;
        fastcgi_read_timeout 600;
        fastcgi_send_timeout 600;

        charset utf-8;

        location /logs {
            deny all;
            return 403;
        }

        location /data/log {
            deny all;
            return 403;
        }
        location / {
            index  index.html index.htm index.php;
        }

        location /mshop {
            root $folder_name;
            autoindex on;
            index  index.html index.htm index.php;
            try_files $uri $uri/ /mshop/index.html;
        }

        location /plot {
            root $folder_name;
            proxy_pass         http://172.26.105.127:5000;
              proxy_redirect     off;

            proxy_set_header   Host                 $host;
            proxy_set_header   X-Real-IP            $remote_addr;
            proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
            proxy_set_header   X-Forwarded-Proto    $scheme;
        }

        location /merchant {
            root $folder_name;
            autoindex on;
            index  index.html index.htm index.php;
            try_files $uri $uri/ /merchant/index.html;
        }

        location ~ /mobile/[/\w]+\.php$ {
            root           $folder_name;
            fastcgi_pass   docker.hostip:9100;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            fastcgi_param  SIGN $http_sign;
            include fastcgi_params;
        }

        location ~ /mobile/[/\w]+\.html$ {
            try_files $uri $uri/ /mobile/index.html;
        }

        location ~ /racc/[/\w]+\.php$ {
            root           $folder_name;
            fastcgi_pass   docker.hostip:9101;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            fastcgi_param  SIGN $http_sign;
            include fastcgi_params;
        }
        
        location ~ \.php$ {
            add_header Cache-Control no-store;
            root           $folder_name;
            fastcgi_pass   docker.hostip:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
            include        fastcgi_params;
        }
    }
}