nginx对tomact端口负载均衡转发配置SSL证书

发布时间:2021/10/23 10:25:56 打印 字号:
upstream www.gworg.com {
    server 127.0.0.1:8080;
    server 127.0.0.1:8021;
}

server {
    listen 80;
    server_name www.gworg.com;
	accessess_log  /data/logs/nginx/scm_access.log;
	error_log  /data/logs/nginx/error.log;

    location / {
        proxy_pass http://www.gworg.com;
        proxy_set_header Host  $host; 
        proxy_set_header X-Real-IP $remote_addr; 
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 

    }
}

server {
    listen 443;
    server_name www.gworg.com;

ssl on; 
ssl_certificate /usr/local/ssl/ssl.crt;
ssl_certificate_key /usr/local/ssl/ssl.key;



    location / {
        proxy_pass http://www.gworg.com;
        proxy_set_header Host  $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    }
}



配置方法二参考

    upstream adminsvr {
        server 127.0.0.1:8013;
        server 127.0.0.1:8014 down;
    }
    
server
{
    listen 80;
    server_name 127.0.0.1;
 #自动跳转到HTTPS (可选)
if ($server_port = 80) {
rewrite ^(.*)$ https://$host$1 permanent;
}
 #自动跳转到HTTPS结束
    location /
    {
        proxy_pass      http://127.0.0.1:8013;
        proxy_set_header Host   $host;
        proxy_set_header X-Real-IP      $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

# Settings for a TLS enabled server.
#
    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  127.0.0.1;
        ssl_certificate "/usr/local/nginx/conf/cert.crt";
        ssl_certificate_key "/usr/local/nginx/conf/cert.key";
        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout  10m;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;
        location /{
        proxy_pass      http://127.0.0.1:8013;
        proxy_set_header Host   $host;
        proxy_set_header X-Real-IP      $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        }
    }

}