centos 8
    /etc/nginx/conf.d/default.conf

    1. server {
    2.     listen 80;
    3.     server_name localhost 119.45.15.239 touchfish.tech;
    4.     rewrite ^(.*)$ https://touchfish.tech$1 permanent;
    5. }
    7. server {
    8.     listen       443 ssl;
    10.     #listen 80;
    11.     root    /usr/share/nginx/html;
    13.     server_name  touchfish.tech;
    14.     #server_name localhost;
    16.     ssl_certificate touchfish.tech_bundle.crt;
    17.     ssl_certificate_key touchfish.tech.key;
    18.     ssl_session_timeout 5m;
    19.     ssl_protocols TLSv1.2 TLSv1.3;
    20.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    21.     ssl_prefer_server_ciphers on;
    23.     #access_log  /var/log/nginx/host.access.log  main;
    25.     location / {
    26.         try_files $uri $uri/ @router;
    27.         proxy_pass CDN 上的 html 文件地址;
    28.         #index  index.html index.htm index.php;
    29.  }
    31.     location @router {
    32.            rewrite ^.*$ / last;
    33.     }
    35.     #error_page  404              /404.html;
    37.     # redirect server error pages to the static page /50x.html
    38.     #
    39.     error_page   500 502 503 504  /50x.html;
    40.     location = /50x.html {
    41.         root   /usr/share/nginx/html;
    42.     }
    44.     # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    45.     #
    46.     #location ~ \.php$ {
    47.     #    proxy_pass   http://127.0.0.1;
    48.     #}
    50.     # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    51.     #
    52.     location ~ \.php$ {
    53.         fastcgi_pass   127.0.0.1:9000;
    54.         fastcgi_index  index.php;
    55.         fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    56.         include        fastcgi_params;
    57.     }
    59.     #deny access to .htaccess files, if Apache's document root
    60.     #concurs with nginx's one
    61.     #
    62.     #location ~ /\.ht {
    63.     #    deny  all;
    64.     #}
    65.     location ~ \.(gif|jpg|png|css|js|ico)$ {
    66.         expires 365d;
    67.     }
    68. }