源站是一个https的discuz,ssl证书是let的免费的
想用速度快的vps反代下
请问如何编辑规则?
访问 a.com就是去源站,访问www.a.com就是去反带后的站点。
itkylin Answered question
- server
- {
- listen 80;
- server_name www.a.com;
- ssl on;
- ssl_certificate /etc/letsencrypt/live/www.a.com/fullchain.pem; #此文件为源站的文件
- ssl_certificate_key /etc/letsencrypt/live/www.a.com/privkey.pem; #此文件为源站的文件
- ssl_session_timeout 5m;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_prefer_server_ciphers on;
- ssl_ciphers “xxxx+xxxx+xxxx+xxxx”; #此数值为源站的数值
- ssl_session_cache builtin:1000 shared:SSL:10m;
- # openssl dhparam -out /usr/local/nginx/ssl/dhparam.pem 2048
- ssl_dhparam /usr/local/nginx/ssl/dhparam.pem;
- location / {
- proxy_pass https://a.com/;
- proxy_redirect off;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- }
- }
itkylin Answered question