nginx反向代理配置https

2026/01 06 14:01

需求是将外网的8083转发到本地服务器的8084

记得把crt和key证书放到conf/cert目录中

worker_processes  1;
events {
  worker_connections  1024;
}
http {
  include  mime.types;
  default_type  application/octet-stream;
  sendfile  on;
  keepalive_timeout  65;
  server {
    listen   8083 ssl;
    server_name  clientlog.coolcoding.com;
    ssl_certificate cert/coolcoding.crt;
    ssl_certificate_key cert/coolcoding.key;
    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers  on;
    location / {
        proxy_pass http://127.0.0.1:8084;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
      }
    }
}

在Windows中操作,如果启动了nginx,需要在任务管理器中,找到nginx杀死,再重新启动新的nginx

否则会出现新启动的nginx能够正常启动,但是不生效的恶心bug