完整案例1

配置CDN内容分发

  1. server {
  2.     listen 8443 ssl;
  3.     server_name  cdn.hzlim.cn;
  4.     ssl_certificate   cert/cdn_server.pem;
  5.     ssl_certificate_key  cert/cdn_server.key;
  6.     ssl_session_timeout 5m;
  7.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  8.     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  9.     ssl_prefer_server_ciphers on;
  10.     location / {
  11.         add_header Access-Control-Allow-Origin  *;
  12.         add_header Access-Control-Allow-Headers X-Requested-With;
  13.         add_header Access-Control-Allow-Methods GET,POST,PUT,DELETE,PATCH,OPTIONS;
  14.         root   /usr/share/nginx/wwwroot/cdn;
  15.         index  index.html index.htm;
  16.     }
  17. }

完整案例2

反向代理HTTPS的Nexus服务器

  1. upstream Nexus3 {
  2.     server 192.168.1.151:8443;
  3. }
  4. server {
  5.     listen 8443 ssl;
  6.     server_name nexus.hzlim.cn;
  7.     ssl_certificate   cert/nexus_server.pem;
  8.     ssl_certificate_key  cert/nexus_server.key;
  9.     ssl_session_timeout 5m;
  10.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  11.     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  12.     ssl_prefer_server_ciphers on;
  13.     location / {
  14.         proxy_pass https://Nexus3;
  15.         client_max_body_size 1024m;
  16.         proxy_buffer_size 1024k;
  17.         proxy_buffers 16 1024k;
  18.         proxy_busy_buffers_size 2048k;
  19.         proxy_temp_file_write_size 2048k;
  20.         proxy_set_header Host $host:$proxy_port;
  21.         proxy_set_header X-Real-IP $remote_addr;
  22.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  23.         proxy_set_header X-Forwarded-Proto "https";
  24.     }
  25. }