1. server
    2. {
    3. listen 80;
    4. listen 443 ssl http2;
    5. server_name api.harris16.top;
    6. index index.php index.html index.htm default.php default.htm default.html;
    7. root /www/wwwroot/api.harris16.top;
    8. #SSL-START SSL相关配置,请勿删除或修改下一行带注释的404规则
    9. #error_page 404/404.html;
    10. #HTTP_TO_HTTPS_START
    11. if ($server_port !~ 443){
    12. rewrite ^(/.*)$ https://$host$1 permanent;
    13. }
    14. #HTTP_TO_HTTPS_END
    15. ssl_certificate /www/server/panel/vhost/cert/api.harris16.top/fullchain.pem;
    16. ssl_certificate_key /www/server/panel/vhost/cert/api.harris16.top/privkey.pem;
    17. ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    18. ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    19. ssl_prefer_server_ciphers on;
    20. ssl_session_cache shared:SSL:10m;
    21. ssl_session_timeout 10m;
    22. add_header Strict-Transport-Security "max-age=31536000";
    23. error_page 497 https://$host$request_uri;
    24. #SSL-END
    25. #ERROR-PAGE-START 错误页配置,可以注释、删除或修改
    26. #error_page 404 /404.html;
    27. #error_page 502 /502.html;
    28. #ERROR-PAGE-END
    29. #PHP-INFO-START PHP引用配置,可以注释或修改
    30. include enable-php-00.conf;
    31. #PHP-INFO-END
    32. #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
    33. include /www/server/panel/vhost/rewrite/api.harris16.top.conf;
    34. #REWRITE-END
    35. #禁止访问的文件或目录
    36. location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
    37. {
    38. return 404;
    39. }
    40. location / {
    41. include uwsgi_params;
    42. uwsgi_pass 127.0.0.1:8000; #端口要和uwsgi里配置的一样
    43. uwsgi_param UWSGI_SCRIPT application.wsgi; #wsgi.py所在的目录名+.wsgi
    44. uwsgi_param UWSGI_CHDIR /www/wwwroot/api.harris16.top/; #项目路径
    45. }
    46. location /static/ {
    47. alias /www/wwwroot/serve/static/; #静态资源路径
    48. }
    49. location /media/ {
    50. alias /www/wwwroot/serve/media/; #静态资源路径
    51. }
    52. #一键申请SSL证书验证目录相关设置
    53. location ~ \.well-known{
    54. allow all;
    55. }
    56. location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    57. {
    58. expires 30d;
    59. error_log /dev/null;
    60. access_log /dev/null;
    61. }
    62. location ~ .*\.(js|css)?$
    63. {
    64. expires 12h;
    65. error_log /dev/null;
    66. access_log /dev/null;
    67. }
    68. access_log /www/wwwlogs/api.harris16.top.log;
    69. error_log /www/wwwlogs/api.harris16.top.error.log;
    70. }