服务器配置nginx.conf文件

#user  root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #经过 NGINX 加载js大文件加载不全，报206 (Partial Content)错误

    proxy_buffer_size 128k;
    proxy_buffers   32 128k;
    proxy_busy_buffers_size 128k;

    # 涓婇潰涓や釜寮€鍚�熀鏈�氨鑳借窇璧蜂簡锛屼笅闈㈢殑鎰挎剰鎶樿吘灏变簡瑙ｄ竴涓?
    gzip on;
    #璇ユ寚浠ょ敤浜庡紑鍚�垨鍏抽棴gzip妯″潡(on/off)
    gzip_buffers 4 16k;
    #璁剧疆绯荤粺鑾峰彇鍑犱釜鍗曚綅鐨勭紦瀛樼敤浜庡瓨鍌╣zip鐨勫帇缂╃粨鏋滄暟鎹�祦銆?6 8k浠ｈ〃浠?k涓哄崟浣嶏紝瀹夎�鍘熷�鏁版嵁澶у皬浠?k涓哄崟浣嶇殑16鍊嶇敵璇峰唴瀛?
    gzip_comp_level 6;
    #gzip鍘嬬缉姣旓紝鏁板€艰寖鍥存槸1-9锛?鍘嬬缉姣旀渶灏忎絾澶勭悊閫熷害鏈€蹇�紝9鍘嬬缉姣旀渶澶т絾澶勭悊閫熷害鏈€鎱?
    gzip_http_version 1.1;
    #璇嗗埆http鐨勫崗璁�増鏈?
    gzip_min_length 256;
    #璁剧疆鍏佽�鍘嬬缉鐨勯〉闈㈡渶灏忓瓧鑺傛暟锛岄〉闈㈠瓧鑺傛暟浠巋eader澶村緱content-length涓�繘琛岃幏鍙栥€傞粯璁ゅ€兼槸0锛屼笉绠￠〉闈㈠�澶ч兘鍘嬬缉銆傝繖閲屾垜璁剧疆浜嗕负256
    gzip_proxied any;
    #gzip_static on;
    #杩欓噷璁剧疆鏃犺�header澶存槸鎬庝箞鏍凤紝閮芥槸鏃犳潯浠跺惎鐢ㄥ帇缂?
    gzip_vary on;
    #鍦╤ttp header涓�坊鍔燰ary: Accept-Encoding ,缁欎唬鐞嗘湇鍔″櫒鐢ㄧ殑
    gzip_types
        text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml
        text/javascript application/javascript application/x-javascript
        text/x-json application/json application/x-web-app-manifest+json
        text/css text/plain text/x-component
        font/opentype font/ttf application/x-font-ttf application/vnd.ms-fontobject
        image/x-icon;
    #杩涜�鍘嬬缉鐨勬枃浠剁被鍨?杩欓噷鐗瑰埆娣诲姞浜嗗�瀛椾綋鐨勬枃浠剁被鍨?
    gzip_disable "MSIE [1-6].(?!.*SV1)";

    proxy_temp_path /usr/local/nginx/proxy_temp_path;
    proxy_cache_path /usr/local/nginx/proxy_cache_path levels=1:2 keys_zone=cache_one:500m inactive=1d max_size=30g;
    fastcgi_connect_timeout 3000;
    fastcgi_send_timeout 3000;
    fastcgi_read_timeout 3000;
    fastcgi_buffer_size 256k;
    fastcgi_buffers 8 256k;
    fastcgi_busy_buffers_size 256k;
    fastcgi_temp_file_write_size 256k;
    fastcgi_intercept_errors on;
  
    client_header_timeout 600s;
    client_body_timeout 600s;
  
    client_max_body_size 100m;             
    client_body_buffer_size 256k; 

    server {
        listen       443 ssl;
        server_name app.xxx.com;
        ssl_certificate      cert/4219590_app.xxx.com.pem;
        ssl_certificate_key  cert/4219590_app.xxx.com.key;
        ssl_session_timeout  5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_prefer_server_ciphers   on;
        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        # location / {
        #     root   html;
        #     index  index.html index.htm;
        # }
        location / {
            root  /var/www/html;
            try_files $uri $uri/ /index.html;
            index index.html;
            #璁剧疆 expires锛岃�缃�紦瀛?
            autoindex on;
            expires 7d; # 缂撳瓨 7 澶?
        }

          location /image/ {
          proxy_pass http://app.xxx.com:83/pandaadmin/image/;
        }

          location /paypal/pay/purchase {
          proxy_pass http://app.xxx.com:81/purchase/pay/paypal/success;
        }

          location /paypal/pay/parcel/order {
          proxy_pass http://app.xxx.com:81/parcel/order/pay/paypal/success;
        }


          location /paypal/pay/recharge {
          proxy_pass http://app.xxx.com:81/recharge/paypal/success;
        }

          location /paypal/pay/failed {
          proxy_pass http://app.xxx.com:81/paypal/pay/failed;
        }

        location /api/ {
            proxy_pass http://app.xxx.com:81;
            rewrite ^/api/(.*)$ /$1 break;
            include  uwsgi_params;
            add_header Access-Control-Allow-Origin *;
            add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
            add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token';
            proxy_redirect     off;
            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
            proxy_set_header   Connection       close;
            add_header X-Xss-Protection 1;
            add_header X-Content-Type-Options nosniff;
            add_header X-Frame-Options DENY;
            proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
            proxy_max_temp_file_size 0;
            proxy_connect_timeout      90;
            proxy_send_timeout         90;
            proxy_read_timeout         90;
            proxy_buffer_size          4k;
            proxy_buffers              4 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;
        }
        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ .php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ .php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /.ht {
        #    deny  all;
        #}
    }

    # server {
    #     listen       443 ssl;
    #   server_name    www.xxx.com xxx.com;
    #   ssl_certificate      cert/xxx.com.pem;
    #   ssl_certificate_key  cert/xxx.com.key;
    #   ssl_session_timeout  5m;
    #   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    #   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    #   ssl_prefer_server_ciphers   on;

    #   location  / {
    #     root  /var/www/html2;
    #     try_files $uri $uri/ /index.html;
    #     index index.html;
    #     #璁剧疆 expires锛岃�缃�紦瀛?
    #     autoindex on;
    #     expires 7d; # 缂撳瓨 7 澶?
    #   }
    #   location /api/ {
    #     proxy_pass http://app.xxx.com:83;
    #     rewrite ^/api/(.*)$ /$1 break;
    #     include  uwsgi_params;
    #     add_header Access-Control-Allow-Origin *;
    #     add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
    #     add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token';
    #     proxy_redirect     off;
    #     proxy_set_header   Host             $host;
    #     proxy_set_header   X-Real-IP        $remote_addr;
    #     proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    #     proxy_set_header   Connection       close;
    #     add_header X-Xss-Protection 1;
    #     add_header X-Content-Type-Options nosniff;
    #     add_header X-Frame-Options DENY;
    #     proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
    #     proxy_max_temp_file_size 0;
    #     proxy_connect_timeout      90;
    #     proxy_send_timeout         90;
    #     proxy_read_timeout         90;
    #     proxy_buffer_size          4k;
    #     proxy_buffers              4 32k;
    #     proxy_busy_buffers_size    64k;
    #     proxy_temp_file_write_size 64k;
    #   }
    # }
    server {
        listen        443 ssl;
      server_name   www.xxx.com xxx.com;
      ssl_certificate      cert/xxx.com.pem;
      ssl_certificate_key  cert/xxx.com.key;
      ssl_session_timeout  5m;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
      ssl_prefer_server_ciphers   on;
      gzip            on;
      gzip_types      text/plain application/xml text/css application/javascript;
      gzip_min_length 1000;
      location  / {
        # expires $expires;

        proxy_redirect                      off;
        proxy_set_header Host               $host;
        proxy_set_header X-Real-IP          $remote_addr;
        proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto  $scheme;
        proxy_read_timeout          1m;
        proxy_connect_timeout       1m;
        proxy_pass http://127.0.0.1:3000; #鍙嶅悜浠ｇ悊
      }
    }
    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
    server {
        listen       80;
        server_name app.xxx.com www.xxx.com xxx.com;
          #rewrite ^/(.*)$ https://${server_name}/$1 permanent;
      if ($host = 'app.xxx.com' ) {
        rewrite ^/(.*)$ https://app.xxx.com/$1 permanent;
      } 
      if ($host = 'www.xxx.com' ) {
        rewrite ^/(.*)$ https://www.xxx.com/$1 permanent;
      }
      if ($host = 'xxx.com' ) {
        rewrite ^/(.*) https://www.xxx.com/$1 permanent;
      }
    }

    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
     include /etc/nginx/vhosts/*;
}