Nginx配置相关

1.http请求重定向到https

server  {
	listen 80;
	server_name lixy98.cn;
	#上传文件大小的限制
        client_max_body_size 1024m;
        #将所有http请求通过rewrite重定向到https。
	rewrite ^(.*)$ https://$host$1 permanent;
	}

server  {
        listen 80;
        server_name a.lixy98.cn;
        #上传文件大小的限制
        client_max_body_size 1024m;
        #将所有http请求通过rewrite重定向到https。
        rewrite ^(.*)$ https://$host$1 permanent;
        }

2.开启目录浏览功能

server  {
        listen       81;
        server_name  www.lixy98.cn;
        autoindex on; #目录浏览功能
        autoindex_exact_size off; #文件显示大小 KB MB GB TB
        autoindex_localtime on; #文件时间显示为服务器的文件时间

        location / {
        root        /lixinyuan;
        autoindex on;
		}
	}

3.禁止ip访问

server  {
	listen 80 default_server;
	server_name _;
	return 403;
	}

4.halo博客代理配置及SSL证书

server  {
	listen 443 ssl;
 	server_name www.lixy98.cn;
	access_log logs/halo/access.log main;
	client_max_body_size 1024m;
	
	ssl_certificate         /usr/local/nginx/cert/10285850_www.lixy98.cn.pem;
        ssl_certificate_key     /usr/local/nginx/cert/10285850_www.lixy98.cn.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
	
	location / {
        proxy_set_header HOST $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        #代理配置Halo的端口
        proxy_pass http://127.0.0.1:8090/;
                    }