示例配置文件：

    1. worker_processes  1;
    2. user www-data;
    4. error_log  /var/log/nginx/error.log warn;
    5. pid        /var/run/nginx.pid;
    7. events {
    8.     worker_connections  1024;
    9. }
    11. http {
    12.     default_type  application/octet-stream;
    14.     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    15.                       '$status $body_bytes_sent "$http_referer" '
    16.                       '"$http_user_agent" "$http_x_forwarded_for"';
    18.     access_log  /var/log/nginx/access.log  main;
    20.     sendfile        on;
    21.     keepalive_timeout  65;
    23.     gzip  on;
    24.     client_header_buffer_size    1k;
    25.     large_client_header_buffers  4 4k;
    27.     ssl_certificate      /etc/ssl/certs/your_cert.crt;
    28.     ssl_certificate_key  /etc/ssl/certs/your_cert.key;
    30.     ssl_prefer_server_ciphers on;
    32.     # intermediate configuration. tweak to your needs.
    33.     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    34.     ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
    37.     # waline
    38.     server {
    39.         listen 8899 ssl;
    40.         server_name *.sharpblog.cn;
    42.         location / {
    43.             proxy_pass http://127.0.0.1:44383;
    44.             proxy_set_header Host $host;
    45.             proxy_set_header X-Real-IP $remote_addr;
    46.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    47.             proxy_set_header X-Forwarded-Proto https;
    48.         }
    49.     }
    51.     # web http -> https
    52.     server {
    53.         listen 80;
    54.         server_name *.sharpblog.cn;
    56.         rewrite ^(.*) https://$server_name:8443$1 permanent;
    57.     }
    59.     # web https
    60.     server {
    61.         listen 443 ssl;
    62.         server_name *.sharpblog.cn;
    64.         location / {
    65.             proxy_pass https://127.0.0.1:44381;
    66.             proxy_set_header Host $host;
    67.             proxy_set_header X-Real-IP $remote_addr;
    68.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    69.             proxy_set_header X-Forwarded-Proto https;
    70.         }
    72.         location /api/ {
    73.             proxy_pass https://127.0.0.1:44380;
    74.             proxy_set_header Host $host;
    75.             proxy_set_header X-Real-IP $remote_addr;
    76.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    77.             proxy_set_header X-Forwarded-Proto https;
    78.         }
    80.         location /swagger/ {
    81.             proxy_pass https://127.0.0.1:44380;
    82.             proxy_set_header Host $host;
    83.             proxy_set_header X-Real-IP $remote_addr;
    84.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    85.             proxy_set_header X-Forwarded-Proto https;
    86.         }
    87.     }
    89.     # admin https
    90.     server {
    91.         listen 8181 ssl;
    92.         server_name *.sharpblog.cn;
    94.         location / {
    95.             proxy_pass https://127.0.0.1:44382;
    96.             proxy_set_header Host $host;
    97.             proxy_set_header X-Real-IP $remote_addr;
    98.             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    99.             proxy_set_header X-Forwarded-Proto https;
    100.         }
    101.     }
    102. }