centos nginx https 配置

server {
        listen  80;    
        server_name 这里换成你的域名,例如baidu.com;    
        set $root_path ‘/home/wwwroot/tapai_html/‘;    
        root $root_path;
        
        index index.html index.PHP index.htm;    
        
        # rewrite ^(.*) https://$server_name;
        try_files $uri $uri/ @rewrite;    
        

        LOCATIOn @rewrite {    
            rewrite ^/(.*)$ /index.PHP?_url=/$1;    
        }    
        
        LOCATIOn ~ \.PHP {    
        
            fastcgi_pass 127.0.0.1:9000;    
            fastcgi_index /index.PHP;    
        
            fastcgi_split_path_info       ^(.+\.PHP)(/.+)$;    
            fastcgi_param PATH_INFO       $fastcgi_path_info;    
            fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;    
            fastcgi_param SCRIPT_FILename $document_root$fastcgi_script_name;    
            include                       fastcgi_params; 
        }   

        # LOCATIOn /imgtext_detail {
                # proxy_pass /home/wwwroot/tapai_html/imgtext_detail;
                # proxy_pass http://127.0.0.1:9000/imgtext_detail/;
        # }

        LOCATIOn ~* ^/(css|img|js|flv|swf|download)/(.+)$ {    
            root $root_path;    
        }    
        
        LOCATIOn ~ /\.ht {    
            deny all;    
        }    
    }

server {
       listen       443;
       listen       [::]:443;
       server_name  这里换成你的域名,例如baidu.com;
       root         /home/wwwroot/tapai_html/;

       ssl on; 
    #    ssl_session_tickets off;
       ssl_certificate "/etc/Nginx/ssl/这里换成证书.crt"; #也有可能是.pem结尾的
       ssl_certificate_key "/etc/Nginx/ssl/这里换成秘钥.key";
       ssl_session_cache shared:SSL:1R_80_11845@;
       ssl_session_timeout  10m;
       ssl_ciphers HIGH:!aNULL:!@H_306_22@mD5;
       ssl_prefer_server_ciphers on;

       # Load configuration files for the default server block.
       include /etc/Nginx/default.d/*.conf;

       error_page 404 /404.html;
           LOCATIOn = /40x.html {
       }

       error_page 500 502 503 504 /50x.html;
           LOCATIOn = /50x.html {
       }
   }

server {
       listen       443;
       listen       [::]:443;
       server_name  这里配置另一个域名,比如qq.com;
       root         /home/wwwroot/tapai_html/;

       ssl on; 
    #    ssl_session_tickets off;
       ssl_certificate "/etc/Nginx/ssl/这里换成此域名对应的证书.pem";
       ssl_certificate_key "/etc/Nginx/ssl/这里换成此域名对应的秘钥.key";
       ssl_session_cache shared:SSL:1R_80_11845@;
       ssl_session_timeout  10m;
       ssl_ciphers HIGH:!aNULL:!@H_306_22@mD5;
       ssl_prefer_server_ciphers on;

       # Load configuration files for the default server block.
       include /etc/Nginx/default.d/*.conf;

       error_page 404 /404.html;
           LOCATIOn = /40x.html {
       }

       error_page 500 502 503 504 /50x.html;
           LOCATIOn = /50x.html {
       }
   }