CentOS服务器利用 Nginx 静态代理博客并开启全站HTTPS

安装 Nginx

在这里就不累赘了，附上安装地址：https://www.centoschina.cn/course/install/3480.html

配置 Nginx

配置文件在 /etc/nginx/nginx.conf

其中配置了两个 server，一个 80 端口的是 HTTP，一个 443 端口的是 HTTPS，这里强制让 80 端口重定向到了 HTTPS。

user root;

worker_processes 4;

pid /run/nginx.pid;

 

events {

worker_connections 768;

# multi_accept on;

}

 

http {

 

##

# Basic Settings

##

 

sendfile on;

tcp_nopush on;

tcp_nodelay on;

keepalive_timeout 65;

types_hash_max_size 2048;

# server_tokens off;

 

# server_names_hash_bucket_size 64;

# server_name_in_redirect off;

 

include /etc/nginx/mime.types;

default_type application/octet-stream;

 

##

# SSL Settings

##

 

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE

ssl_prefer_server_ciphers on;

 

##

# Logging Settings

##

 

access_log /var/log/nginx/access.log;

error_log /var/log/nginx/error.log;

 

##

# Gzip Settings

##

 

gzip on;

gzip_disable "msie6";

 

gzip_vary on;

gzip_proxied any;

gzip_comp_level 6;

gzip_buffers 16 8k;

gzip_http_version 1.1;

gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

 

##

# Virtual Host Configs

##

 

#include /etc/nginx/conf.d/*.conf;

#include /etc/nginx/sites-enabled/*;

 

server {

listen 80;

server_name www.anany.vip anany.vip;

return 301 https://$server_name$request_uri;

}

 

server{

server_name www.anany.vip anany.vip;

listen 443;

location / {

root /root/blog/pages;

index index.html;

}

ssl on;

ssl_certificate /etc/nginx/anany.vip_bundle.crt;

ssl_certificate_key /etc/nginx/anany.vip.key;

}

}