- 论坛徽章:
- 3
|
请问大家全站采用http,但是全站下面的某个location采用https,请问如何配置,如下配置是否可行?
server{
server_name www.test.com;
access_log /home/nginx/logs/threegene_access.log main buffer=32k;
root /home/ddr/nginx/threegene;
location ~ .*\.(html|htm|json|gif|jpg|JPG|jpeg|png|bmp|ico|txt|css|mp4|pdf|js|map|pptx|ppt)$ {
index index.html;
expires 30d;
}
location /ms/ {
allow 220.178.25.22;
allow 172.2.2.0/24;
allow 192.2.2.0/24;
deny all;
proxy_pass http://10.46.103.163:16108/ms/;
proxy_redirect off;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_buffering off;
ssl_certificate sslkey/20191212.crt;
ssl_certificate_key sslkey/20191212.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
ssl_prefer_server_ciphers on;
ssl_certificate sslkey/20191212.crt;
ssl_certificate_key sslkey/20191212.key;
if ($scheme = http) {
return 301 https://$host$request_uri;
}
}
error_page 403 /403.html;
error_page 404 /404.html;
error_page 502 /502.html;
error_page 503 /503.html;
error_page 500 /50x.html;
location = /403.html {
root /home/ddr/nginx/error;
}
location = /404.html {
root /home/ddr/nginx/error;
}
location = /502.html {
root /home/ddr/nginx/error;
}
location = /503.html {
root /home/ddr/nginx/error;
}
location = /50x.html {
root /home/ddr/nginx/error;
}
}
|
|