1. # HTTPS
    2. server {
    3.   listen 443 ssl http2;
    4.   listen [::]:443 ssl http2;
    5.   # https ssl
    6.   ssl_certificate ssl/server.lmsite.cn.crt;
    7.   ssl_certificate_key ssl/server.lmsite.cn.key;
    8.   include  ssl/ssl_config.conf;
    10.   server_name server.lmsite.cn www.server.lmsite.cn;
    11.   access_log /data/weblogs/server.lmsite.cn_nginx.log combined;
    13.   # 代理 spug
    14.   location / {
    15.     include proxy_set_header.conf;
    16.     proxy_pass http://127.0.0.1:61208;
    17.   }
    19.   # 限制访问的文件
    20.   location ~ /(\.user\.ini|\.ht|\.git|\.svn|\.project|LICENSE|README\.md) {
    21.     deny all;
    22.   }
    23. }
    25. # http rewrite https
    26. server {
    27.   listen 80;
    28.   listen [::]:80;
    29.   server_name server.lmsite.cn www.server.lmsite.cn;
    30.   rewrite ^(.*)$ https://${server_name}$1 permanent;
    31. }