frp, https, http, nginx 多服務, ssl等配置

server {

        listen 80 default_server;

        listen [::]:80 default_server;

       root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name _;

        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
        }
　　　　

index index.html index.htm index.nginx-debian.html;

 

        server_name _;

 

        location / {

                # First attempt to serve request as file, then

                # as directory, then fall back to displaying a 404.

                try_files $uri $uri/ =404;

        }

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #       include snippets/fastcgi-php.conf;
        #
        #       # With php7.0-cgi alone:
        #       fastcgi_pass 127.0.0.1:9000;
        #       # With php7.0-fpm:
        #       fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #       deny all;
        #}
}


# Virtual Host configuration for example.com
#
upstream movie_pool{
    server 127.0.0.1:8000;
}

upstream go_pool{
    server 127.0.0.1:9000;
}
#Demo1端口轉發
server {
   # listen       80;
    listen       443 ssl;
    server_name  www.sddeznsm.com;

    ssl on;
        ssl_certificate     /root/nginx-1.11.3/ssl/sddeznsm_com.crt;
        ssl_certificate_key  /root/nginx-1.11.3/ssl/sddeznsm_com.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
    access_log logs/book.log;
    error_log logs/book.error;

    #將所有請求轉發給demo_pool池的應用處理
    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://movie_pool;
    }
}

#Demo1端口轉發
server {
    listen       80;
    #listen       443 ssl;
    server_name  *.sddeznsm.com;

    access_log logs/book.log;
    error_log logs/book.error;

    #將所有請求轉發給demo_pool池的應用處理
    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://movie_pool;
    }
}
# You can move that to a different file under sites-available/ and symlink that
# to sites-enabled/ to enable it.
#

server {
       listen 443 ssl;
        server_name  sddeznsm.com;
        ssl on;
        ssl_certificate     /root/nginx-1.11.3/ssl/sddeznsm_com.crt;
        ssl_certificate_key  /root/nginx-1.11.3/ssl/sddeznsm_com.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;


       # location / {
        #    root   html;
       #     index  index.html index.htm;
      #  }

        location / {
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://go_pool;
    }
    }