nginx多域名、多证书

环境：

一台nginx服务器 192.168.10.251

两台windowsserver2012 IIS服务器（192.168.10.252、192.168.10.253）

从阿里云上下载ssl证书并上传到nginx服务器

nginx配置文件添加证书

upstream test_1.com {

       # ip_hash;

               server 192.168.10.252:80 weight= max_fails= fail_timeout=12s;

               server 122.226.10.253: weight= max_fails= fail_timeout=12s;

                       }

server {

   listen ;

    #access_log  logs/access.log  ;

       server_name  test_1.com;         
       ssl on;

       ssl_certificate /usr/local/nginx/cert/test_1.pem;

       ssl_certificate_key /usr/local/nginx/cert/test_1.key;

       ssl_session_cache shared:SSL:1m;

       ssl_session_timeout 5m;

       ssl_protocols TLSv1 TLSv1. TLSv1.;

       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

       ssl_prefer_server_ciphers on;

   location / {

       root   html;

          index  index.html index.htm;

          proxy_redirect off;

          proxy_set_header Host $host;

          proxy_set_header X-Real-IP $remote_addr;

          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          proxy_pass http://test_1.com;

          client_max_body_size 50m;

                 }

     }

upstream test_2.com {

       # ip_hash;

               server 122.226.10.252: weight= max_fails= fail_timeout=12s;

               server 122.226.10.253: weight= max_fails= fail_timeout=12s;

                       }

server {

   listen ;

        #access_log  logs/access.log  ;

       server_name  test_2.com;

       ssl on;

       ssl_certificate /usr/local/nginx/cert/test_2.pem;

       ssl_certificate_key /usr/local/nginx/cert/test_2.key;

       ssl_session_cache shared:SSL:1m;

       ssl_session_timeout 5m;

       ssl_protocols TLSv1 TLSv1. TLSv1.;

       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

       ssl_prefer_server_ciphers on;

   location / {

           root   html;

          index  index.html index.htm;

          proxy_redirect off;

          proxy_set_header Host $host;

          proxy_set_header X-Real-IP $remote_addr;

          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          proxy_pass http://test_2.com;

          client_max_body_size 50m;

                 }

     }

}

参考：

https://blog.csdn.net/fragrant_no1/article/details/83785882
https://www.cnblogs.com/beyang/p/7718463.html
https://blog.csdn.net/weixin_38187317/article/details/81670073
https://www.cnblogs.com/beyang/p/7718463.html

巴特西

nginx多域名、多证书

最新文章

热门文章