Lnmp 配置thinkphp5 Nginx基础设置，包含http+https配置

程序员文章站 2022-06-15 14:54:42

...

server
    {

        listen 443  ssl http2 ;
        ssl_certificate /usr/local/nginx/key/mtgo/full_chain.pem;
        ssl_certificate_key /usr/local/nginx/key/mtgo/private.key;

        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout 5m;

        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;
        listen 80 ;
        #listen [::]:80 default_server ipv6only=on;
        server_name www.xxjysxh.com;
        index index.html index.htm index.php;
        root  /mydata/xxj/public;

        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        include enable-php-pathinfo.conf;

        location /nginx_status
        {
            stub_status on;
            access_log   off;
        }


        location / {
            if (!-e $request_filename) {
            rewrite  ^(.*)$  /index.php?s=/$1  last;
            break;
           }
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /home/wwwlogs/access.log;
    }

这个地方设置HTTPS，比较关键，不这样设置就报错，我的法克

listen 443  ssl http2 ;

这个地方是设置证书的，证书需要绝对地址，通过命令 pwd 可以看到

ssl_certificate /usr/local/nginx/key/mtgo/full_chain.pem;
ssl_certificate_key /usr/local/nginx/key/mtgo/private.key;