server {
listen 443;
server_name demo.shengruijt25.com;
ssl on;
root html;
index index.html index.htm;
ssl_certificate /data/website/demo_373/cert/demo.pem;
ssl_certificate_key /data/website/demo_373/cert/demo.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root /data/website/demo_373;
index index.html index.htm index.php;
if (!-e $request_filename) {
rewrite ^/index.php(.*)$ /index.php?s=$1 last;
rewrite ^(.*)$ /index.php?s=$1 last;
break;
}
}
access_log /data/website/log/demo_373.log main;
location ~ \.php$ {
root /data/website/demo_373;
include fastcgi.conf;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
}
注意： crt或者cer證書可以直接改后綴名為pem證書
