server {
listen 80;
server_name localhost;
rewrite ^(.*) https://$host permanent;
}
server {
listen 443;
server_name www.xxx.cn;
root /data/www/blog/;
ssl on;
ssl_certificate /data/www/blog/ssl/1_www.xxx.cn_bundle.crt;
ssl_certificate_key /data/www/blog/ssl/2_www.xxx.cn.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
location / {
try_files $uri $uri/ /index.html;
}
location /api {
proxy_pass http://118.89.60.117:3030;
}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
Lihat kumpulan keselamatan dan tetapan port firewall