nginx ssl配置详解_nginx实现内外网同时访问

大家好，又见面了，我是你们的朋友全栈君。如果您正在找激活码,请点击查看最新教程,关注关注公众号 “全栈程序员社区” 获取激活教程,可能之前旧版本教程已经失效.最新Idea2022.1教程亲测有效,一键激活。

Jetbrains全系列IDE稳定放心使用

1、nginx.conf 添加 include proxy.conf

2、配置proxy.conf

server {
	listen 80;
        listen 443 ssl;        
	server_name 域名1;
	
	ssl_certificate      域名1.com.pem; #ssl证书路径
	ssl_certificate_key  域名1.com.key; #ssl证书路径

	ssl_session_cache    shared:SSL:1m;
	ssl_session_timeout  5m;

	ssl_ciphers  HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers  on;
	location / {
		root /usr/dist; //vue路径
		index index.html;
                add_header Access-Control-Allow-Origin *;
                add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
                add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
 
                if ($request_method = 'OPTIONS') {
                        return 204;
                }

	}
}

server {
        listen 80;
        listen 443 ssl;
	server_name 域名2; 
	index index.jsp index.html index.html index.shtml;
        ssl_certificate      域名2.com.pem;
        ssl_certificate_key  域名2.com.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
	location / {
		proxy_pass http://127.0.0.1:8002;
		#proxy_redirect off;
		proxy_set_header Host $host;
		proxy_set_header X-Real-Ip $remote_addr;
		proxy_set_header X-Forwarded-For $remote_addr;
                add_header Access-Control-Allow-Origin *;
    		add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
    		add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
 
    		if ($request_method = 'OPTIONS') {
        		return 204;
    		}
	}
}
...
1、非泛型域名，一个子域名要绑定一个SSL证书
2、需要多个子域名代理同一IP下的不同端口，只需按上面的操作，配置多个server即可。

3、浏览器访问：

      https://域名1 ======>http://127.0.0.1:8001

      https://域名2 ======>http://127.0.0.1:8002

4、proxy_pass代理转发

server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            proxy_pass http://127.0.0.1:8001;
        }

        location /proxy/ {
            proxy_pass http://127.0.0.1:8002/;
        }
}

浏览器访问：

      http://127.0.0.1 ======>http://127.0.0.1:8001

      http://127.0.0.1/proxy/ ======>http://127.0.0.1:8002/