nginx反向代理:http和https

nginx反向代理:http和https

http反向代理

nginx反向代理 127.0.0.1:88 端口到 mail.madbull.stie:80 端口,/etc/nginx/nginx.conf文件里配置。

http {
    server {
        listen       80;
        server_name  mail.madbull.site ;

        location / {
                        proxy_pass http://127.0.0.1:88 ;
                        proxy_set_header Host $host ;
                        proxy_set_header X-Real-IP $remote_addr ;
                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

https反向代理

nginx反向代理 127.0.0.1:448 端口到 mail.madbull.stie:443 端口,/etc/nginx/nginx.conf文件里配置。

http {
    server {
        listen       443 ssl;
        server_name  mail.madbull.site ;

        ssl on;
        ssl_certificate            /xxx/xxx/xxx.pem;  # 证书
        ssl_certificate_key        /xxx/xxx/xxx.key;  # 私钥

        ssl_session_timeout        5m ;

        ssl_ciphers                HIGH:!aNULL:!MD5;
        ssl_protocols                SSLv2 SSLv3 TLSv1.2 ;
        ssl_prefer_server_ciphers        on ;

        location / {
                        proxy_pass https://127.0.0.1:448 ;
                        proxy_set_header Host $host ;
                        proxy_set_header X-Real-IP $remote_addr ;
                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ;
                        proxy_ssl_verify off ;   # 是否验证后端服务的证书。
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

linux基本配置项参看:https://www.madbull.site/?p=577

评论

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注