nginx配置示例-含反向代理

events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    server {
        listen 443 ssl http2;
        server_name teamemory.fun www.teamemory.fun;
        root /data/wwwroot/auctionPort;#项目路径
        charset utf-8;
        ssl_certificate    /data/3189862_www.teamemory.fun.pem;#.pem证书路径
        ssl_certificate_key  /data/3189862_www.teamemory.fun.key;#.key证书路径
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        error_page 497  https://$host$request_uri;
        location / {
           include uwsgi_params;
           uwsgi_pass 127.0.0.1:8997;
           uwsgi_param UWSGI_SCRIPT auctionPort.wsgi;
           uwsgi_param UWSGI_CHDIR /data/wwwroot/auctionPort/;#项目路径
           
        }
        location /static/ {
        alias /data/wwwroot/auctionPort/static/; #静态资源路径
        }
        access_log  /data/wwwroot/auctionPort/www.teamemory.fun.log;
        error_log  /data/wwwroot/auctionPort/www.teamemory.fun.error.log;
    }
    server {
        listen 80;
        server_name teamemory.fun www.teamemory.fun;
        root /opt/zj;
    }
}

以上配置的80端口和443端口完全是两套内容。通过http:teamemory.fun  和 https://teamemory.fun 分别可以查看。

注意：谷歌浏览器默认会跳转到https的情况。

events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    server {
        listen 443 ssl http2;
        server_name teamemory.fun www.teamemory.fun;
        root /data/wwwroot/auctionPort;#项目路径
        charset utf-8;
        ssl_certificate    /data/3189862_www.teamemory.fun.pem;#.pem证书路径
        ssl_certificate_key  /data/3189862_www.teamemory.fun.key;#.key证书路径
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        error_page 497  https://$host$request_uri;
        location / {
           include uwsgi_params;
           uwsgi_pass 127.0.0.1:8997;
           uwsgi_param UWSGI_SCRIPT auctionPort.wsgi;
           uwsgi_param UWSGI_CHDIR /data/wwwroot/auctionPort/;#项目路径
           
        }
        location /static/ {
        alias /data/wwwroot/auctionPort/static/; #静态资源路径
        }
        access_log  /data/wwwroot/auctionPort/www.teamemory.fun.log;
        error_log  /data/wwwroot/auctionPort/www.teamemory.fun.error.log;
    }
    server {
        listen 80;
        server_name teamemory.fun www.teamemory.fun;
        rewrite ^(.*) https://$server_name$1 permanent;  #代表重定向到443
    }

}

以上配置，无论你访问http:teamemory.fun  还是 https://teamemory.fun 均跳转到443对应的网页。

events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    server {
        listen 443 ssl http2;
        server_name teamemory.fun www.teamemory.fun;
        root /data/wwwroot/auctionPort;#项目路径
        charset utf-8;
        ssl_certificate    /data/3189862_www.teamemory.fun.pem;#.pem证书路径
        ssl_certificate_key  /data/3189862_www.teamemory.fun.key;#.key证书路径
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        error_page 497  https://$host$request_uri;
        location / {
           include uwsgi_params;
           uwsgi_pass 127.0.0.1:8997;
           uwsgi_param UWSGI_SCRIPT auctionPort.wsgi;
           uwsgi_param UWSGI_CHDIR /data/wwwroot/auctionPort/;#项目路径
           
        }
        location /static/ {
        alias /data/wwwroot/auctionPort/static/; #静态资源路径
        }
        access_log  /data/wwwroot/auctionPort/www.teamemory.fun.log;
        error_log  /data/wwwroot/auctionPort/www.teamemory.fun.error.log;
    }
    server {
        listen 80;
        server_name teamemory.fun www.teamemory.fun;
        location / {
            proxy_pass http://localhost:7001;
        }
    }
}

以上是80端口反向代理到7001端口，相当于表面访问的是80端口，实际访问到了7001端口。

events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    server {
        listen 443 ssl http2;
        server_name teamemory.fun www.teamemory.fun;
        root /data/wwwroot/auctionPort;#项目路径
        charset utf-8;
        ssl_certificate    /data/3189862_www.teamemory.fun.pem;#.pem证书路径
        ssl_certificate_key  /data/3189862_www.teamemory.fun.key;#.key证书路径
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 10m;
        error_page 497  https://$host$request_uri;
        location / {
           include uwsgi_params;
           uwsgi_pass 127.0.0.1:8997;
           uwsgi_param UWSGI_SCRIPT auctionPort.wsgi;
           uwsgi_param UWSGI_CHDIR /data/wwwroot/auctionPort/;#项目路径
           
        }
        location /static/ {
        alias /data/wwwroot/auctionPort/static/; #静态资源路径
        }
        access_log  /data/wwwroot/auctionPort/www.teamemory.fun.log;
        error_log  /data/wwwroot/auctionPort/www.teamemory.fun.error.log;
    }
    server {
        listen 80;
        server_name teamemory.fun www.teamemory.fun;
        location / {  #匹配前端的地址
            root        /opt/zj/;
            try_files   $uri $uri/ /index.html last; //这里同时解决了vue的history模式，没有了 /#/
            index       index.html;
        }
        location /admin {  #匹配接口的地址
            proxy_pass http://localhost:7001;
        }
    }
}

 以上的配置，我们可以看出，前后端分离，前端后台的项目部署是分开的，利用nginx的反向代理来进行配置。

/usr/local/nginx/sbin/nginx -s reload   #nginx重启