Nginx配置之:http請求轉換為https

Nginx 全站https 反向代理 Tomcat 遇到靜態文件.js，.css文件仍走http,出現block-all-mixed-content錯誤時,可使用CSP指令將http資源轉換為https
關鍵配置為:
add_header Content-Security-Policy upgrade-insecure-requests;

完整配置:

server {
        listen 443;
        server_name demo.thatscode.com;
 
        ....
        省略ssl 相關配置
        ....
 
        location / {
 
            ....
            省略其他proxy參數
            ....
            proxy_pass http://pool_demo;
            add_header Content-Security-Policy upgrade-insecure-requests;
        }
        access_log  /www/logs/demo.thatscode.com.log;
        error_log   /www/logs/demo.thatscode.com.error;