1. # HTTPS
    2. server {
    3.   listen 443 ssl http2;
    4.   listen [::]:443 ssl http2;
    5.   # https ssl
    6.   ssl_certificate ssl/3889366_lmsite.cn.pem;
    7.   ssl_certificate_key ssl/3889366_lmsite.cn.key;
    8.   include  ssl/ssl_config.conf;
    10.   server_name lmsite.cn www.lmsite.cn;
    11.   access_log /data/weblogs/lmsite.cn_nginx.log combined;
    13.   #error_page 404 /404.html;
    14.   #error_page 502 /502.html;
    16.   # 精准匹配
    17.   location / {
    18.     index index.html index.htm index.php index.jsp;
    19.     root /webroot/lmsite.cn;
    20.   }
    22.   # 代理 spug
    23.   location /spug/ {
    24.     include proxy_set_header.conf;
    25.     proxy_pass http://127.0.0.1:28080/;
    26.   }
    28.   # 代理 status
    29.   location /status/ {
    30.     include proxy_set_header.conf;
    31.     proxy_pass http://127.0.0.1:61208/;
    32.   }
    34.   # 静态资源
    35.   #location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
    36.   #  expires 30d;
    37.   #  access_log off;
    38.   #}
    40.   # css/js
    41.   #location ~ .*\.(js|css)?$ {
    42.   #  expires 7d;
    43.   #  access_log off;
    44.   #}
    46.   # 限制访问的文件
    47.   location ~ /(\.user\.ini|\.ht|\.git|\.svn|\.project|LICENSE|README\.md) {
    48.     deny all;
    49.   }
    50. }
    52. # http rewrite https
    53. server {
    54.   listen 80;
    55.   listen [::]:80;
    56.   server_name lmsite.cn www.lmsite.cn;
    57.   rewrite ^(.*)$ https://${server_name}$1 permanent;
    58. }