http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
server {
listen 80;
server_name xxxxx.xxxxx.com; # 域名
rewrite ^(.*)$ https://$host:443$1 permanent;
}
server {
listen 443 ssl;
server_name xxxxx.xxxxx.com; # 域名
root /www/server/nginx/html/;
ssl_certificate /www/server/nginx/ssl_pem/xxxxx.pem;
ssl_certificate_key /www/server/nginx/ssl_pem/xxxxx.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {# 前端部分
index index.html index.htm;
try_files $uri $uri/ /index.html;
location /api { # 后端部分
proxy_pass https://xxxxx.xxxxx.com:5000; # 域名:端口
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 5M;
}
}
}