nginx域名代理

[root@web prometheus]# yum install nginx -y 
[root@web prometheus]# cat /etc/nginx/conf.d/prometheus.conf 
server {
	#填寫綁定證書的域名
	server_name xxxx.com;
	listen 80;
	#把http的域名請求轉成https
	rewrite (.*) https://$server_name$1;
}
server {
        #填寫綁定證書的域名
        server_name xxxx.com; 
        #SSL 訪問端口號為 443
        listen 443 ssl; 
        #證書文件名稱
        ssl_certificate /etc/nginx/ssl/xxx.crt; 
        #私鑰文件名稱
        ssl_certificate_key /etc/nginx/ssl/xxx.key; 
        ssl_session_timeout 10m;
        #請按照以下協議配置
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
        #請按照以下套件配置，配置加密套件，寫法遵循 openssl 標准。
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; 
        ssl_prefer_server_ciphers on;
	    ssl_session_cache shared:SSL:10m;
		client_max_body_size 250m;
   	
   	location / {
	    proxy_pass   http://127.0.0.1:9090/; 
        proxy_http_version  1.1;
        proxy_cache_bypass  $http_upgrade;
        proxy_set_header Upgrade   $http_upgrade;
        proxy_set_header Connection   "upgrade";
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host  $host;
        proxy_set_header X-Forwarded-Port  $server_port;
	}

}