nginx配置http(80)自动跳转到https(443)

nginx配置http(80)自动跳转到https(443)

nginx配置http(80)自动跳转到https(443)分两种情况,一是,单个域名80端口重定向到443端口,二是,泛域名的80端口重定向到443端口,如何启用https访问可参考网址:针对这两种情况分别进行介绍。

1、单域名配置

将访问单域名www.example.com的80端口重定向到443端口,只需在80端口配置中增加一条跳转命令:rewrite ^(.*)$ https://$$1 permanent; 即可实现访问单域名http自动跳转到https的功能,配置如下:

server {
    listen 80;
    server_name www.example.com;
    rewrite ^(.*)$ https://${server_name}$1 permanent; #增加内容
}

server {
    listen 443 ssl;
    server_name www.example.com; 

    ssl_certificate    /opt/cert/www.example.com.pem;
    ssl_certificate_key   /opt/cert/www.example.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;  
    ssl_prefer_server_ciphers on;

    add_header Strict-Transport-Security "max-age=31536000";

    location / {
        proxy_pass   http://127.0.0.1:8080;
        proxy_set_header   Host      $host;
        proxy_set_header   X-Real-IP   $remote_addr;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    }
}

2、泛域名配置

将访问泛域名*.example.com的80端口重定向到443端口,只需在80端口配置中增加一条跳转命令:return 301 https://$http_host$request_uri; 即可实现泛域名http自动跳转到https的功能,配置如下:

server {
    listen 80;
    server_name *.example.com;
    return 301 https://$http_host$request_uri; #增加内容
}

server {
    listen 443 ssl;
    server_name *.example.com; 

    ssl_certificate    /opt/cert/www.example.com.pem;
    ssl_certificate_key   /opt/cert/www.example.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;  
    ssl_prefer_server_ciphers on;

    add_header Strict-Transport-Security "max-age=31536000";

    location / {
        proxy_pass   http://127.0.0.1:8080;
        proxy_set_header   Host      $host;
        proxy_set_header   X-Real-IP   $remote_addr;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    }
}

检查配置文件是否正确命令

nginx -t

然后重启nginx服务后,http自动跳转到https的配置即可生效了。

systemctl restart nginx

评论

Your browser is out-of-date!

Update your browser to view this website correctly. Update my browser now

×