nginx配置https 強制使用https

免費證書申請地址：

https://freessl.cn/

申請步驟：

1.申請域名，

2.在雲解析（阿里雲域名解析  看自己申請域名的平台）配置TXT值  
3.驗證域名

4.下載域名key 和 pem配置到nginx中

server {
listen 80;
server_name xxx.com;
rewrite ^ https:/$http_host$request_uri? permanent;
}

server {
listen 443 ssl;
server_name  xxx.com;

ssl_certificate cert/xxx.pem;
ssl_certificate_key cert/xxx.key;

ssl_session_timeout 5m;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
proxy_pass http:// xxx.com;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Cookie $http_cookie;
}
}