nginx ssl加密反向代理

mkdir /apps/nginx/conf/cert

建立一个文件目录存放加密证书

vi /apps/nginx/conf/nginx.conf

然后修改nginx配置文件进行https加密

server {
listen 443;
server_name www.abc.com;
ssl on;
ssl_certificate /apps/nginx/conf/cert/www.pem;
ssl_certificate_key /apps/nginx/conf/cert/www.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
location / {
root html;
index index.html index.htm;
proxy_pass http://192.168.4.193:8080;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Proto $scheme;
error_page 497 https://$host$uri?$args;
}
}

配置文件只用增加一个443端口的server模块



如上图部分是加密证书存放路径，根据自己的配置自定义即可
配置完毕后server nginx reload
重新加载配置文件，此时通过https就可访问网站**