nginx从仅支持80到支持80和443

测试环境的域名，之前只支持http。开发同学不知啥时候改了数据库配置，导致所有跳转到到了https了。所以得加上https访问。

配置文件之前是这样的：

  server {
        listen 80;
        server_name web-sit.*******.com;
        root         /usr/share/nginx/*****-manage;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        location ~ .(css|js)$ {
            add_header Cache-Control public;
        }

        location / {
            try_files $uri $uri/ /index.html;
        }
        #location /*****/infoManagement {
        location /***** {
            #try_files $uri $uri/ /index.html;
            #proxy_pass http://10.202.70.152:8880;
            proxy_pass  http://10.206.230.213:8880;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }

查了些文档，表示要将443加上，得有证书。

于是从腾讯云生成了一个免费的ssl证书，下载后传到服务器。再配置到ng的配置文件里。

配置文件只需要修改监听端口，再加上证书路径；以及在443这段的后面再加上原来的80端口，将80的访问重定向到443的访问就好了。

   server {
        listen 443 ssl;
        ssl on;
        server_name web-sit.****.com;
        ssl_certificate  /home/appdeploy/nginx-pem/web-sit.****.com.pem; #证书路径
        ssl_certificate_key /home/appdeploy/nginx-pem/web-sit.****.com.key; #证书路径
        root         /usr/share/nginx/ibu-****-manage;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        location ~ .(css|js)$ {
            add_header Cache-Control public;
        }

        location / {
            try_files $uri $uri/ /index.html;
        }
        #location /sf-express/infoManagement {
        location /sf-express {
            #try_files $uri $uri/ /index.html;
            #proxy_pass http://10.202.70.152:8880;
            proxy_pass  http://10.206.230.213:8880;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }

server {
        listen       80;
        server_name  web-sit.****.com;

        include /etc/nginx/default.d/*.conf;
        rewrite ^(.*)$ https://$host$1 permanent;


    }

最后，重启ng。