不开启80端口 https 无法访问

nginx 配置了 证书 当 开启80端口 的时候 https 就可以访问域名 不开启80端口 https 域名就无法访问
server {
    #listen       80;
    listen 443 ssl;
    server_name xxx.cn;
    if ($http_Host !~* ^xxx.cn$)
    {
        return 403;
    }

ssl on;

    ssl_certificate xxx-2022.crt;
    ssl_certificate_key xxxx-2022.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
    ssl_prefer_server_ciphers on;

    #charset koi8-r;

    #access_log  logs/host.access.log  main;

    location / {
            proxy_set_header Host $host;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://127.0.0.1:8993;
    }

80和443是独立的，可以单独配置 443，可以开启下错误日志查看，检查是否是测试的问题，可到阿里云或腾讯云搜索 ssl nginx 配置参照是否配置错误

可以设置个http跳转到https，以后可以一直访问https了



```commonlisp
server {
    listen 80;
    server_name xxxx.com www.xxxxx.com;
    rewrite ^(.*)$  https://$host$1 permanent;

}

server {
        listen  443 ssl;




server
  {
  listen 80 default;
  listen 443 default_server;
  server_name _;
  return 403;
  #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  #error_page 404/404.html;
  ssl_certificate /etc/letsencrypt/live/0ne0ne.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/0ne0ne.com/privkey.pem;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-
  SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE;
 ssl_prefer_server_ciphers on;
 ssl_session_cache shared:SSL:10m;
 ssl_session_timeout 10m;
 error_page 497 https://$host$request_uri;
 #SSL-END
 }

参考