nginx部署ssl证书域名

问题遇到的现象和发生背景

nginx 配置 域名后不生效

问题相关代码,请勿粘贴截图

server {

listen 80;

server_name http://www.xiaoyulife.cn/;

location / {

proxy_pass http://localhost:8080;

proxy_set_header Host $http_host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

root /usr/local/nginx/html/dist/;

try_files $uri $uri/ /index.html;

index index.html index.htm;

}

location /api/admin {

proxy_set_header Host $http_host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header REMOTE-HOST $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_pass http://localhost:8080/api/admin; #设置监控后端启动的端口

}

server {
    listen 443 ssl;

    server_tokens off;

    keepalive_timeout 5;

    root /usr/share/nginx/html; #填写您的网站根目录,例如:/usr/local/lighthouse/softwares/wordpress

    index index.html;

    server_name xiaoyulife.cn; #填写您的证书绑定的域名,例如:www.cloud.tencent.com

    ssl_certificate /etc/nginx/ssl/xiaoyulife.cn_bundle.crt; #填写您的证书文件名称,例如:1_cloud.tencent.com_bundle.crt

    ssl_certificate_key /etc/nginx/ssl/xiaoyulife.cn.key; #填写您的私钥文件名称,例如:2_cloud.tencent.com.key

    ssl_session_cache   shared:SSL:1024m;    

    ssl_session_timeout 5m;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;  # 可参考此 SSL 协议进行配置

    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;   #可按照此加密套件配置,写法遵循 openssl 标准

    ssl_prefer_server_ciphers on;

    location / {
        proxy_pass http://127.0.0.1:8000;
    }

    #location /static {
        #        root /usr/share/nginx/html/;
        #}

    #location /media {
        #        root /usr/share/nginx/html/;
        #}
}

望采纳

server {
    listen 443 ssl;
    server_name www.finance.xxxx.cn; # ssl 证书申请的域名地址,不包括前面的http/https
    root /usr/share/nginx/modules/finance; # 前端项目目录
    index index.html index.htm;
    ssl_certificate /etc/nginx/cert/finance.pem; #  证书文件
    ssl_certificate_key /etc/nginx/cert/finance.key;  #  证书文件密钥
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; 
    ssl_prefer_server_ciphers on;
    location / {
        proxy_pass http://127.0.0.1:8001;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

题主的server_name,配置错了吧

域名访问,http默认端口80;https默认端口443。80、443端口需要备案

可以试一下,改一下nginx的监听端口,然后通过域名+端口访问看看,能不能通。如果能通就是配置没问题,端口问题

怎么不生效?把提示贴出来

server_name http://www.xiaoyulife.cn/;

域名改一下,Nginx机器上的hosts,再指向自己这个机器


很明显,这里错了,把server_name http://www.xiaoyulife.cn/;   改成:server_name www.xiaoyulife.cn;
这样应该就可以了,试试看。不行再问我。希望你能解决。

首先这是HTTPS。你需要监听443端口,楼上已经给了很多现成的了。然后你的问题应该是没有将http重定向到HTTPS。所以需要同时监听80端口,并且将80端口的请求全部转到443

谢谢给位 已经解决了 原因是另一个同事 ip地址解析错误