server

{

    listen ;

    listen  ssl http2;

    server_name domain.com www.domain.com;

    index index.js index.php index.html index.htm default.php default.htm default.html ;

    root /www/wwwroot/domain.com/www;

    set $node_port ;

    if ( -f $request_filename/index.html ){

            rewrite (.*) $/index.html break;

        }

        if ( !-f $request_filename ){

            rewrite (.*) /index.js;

        }

        location = /index.js {

            proxy_http_version 1.1;

            proxy_set_header X-Real-IP $remote_addr;

            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            proxy_set_header Host $http_host;

            proxy_set_header X-NginX-Proxy true;

            proxy_set_header Upgrade $http_upgrade;

            proxy_set_header Connection "upgrade";

            proxy_pass http://127.0.0.1:$node_port$request_uri;

            proxy_redirect off;

        }

        location ~ /static/ {

            etag         on;

            expires      max;

        }

    #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则

    #error_page /.html;

    #HTTP_TO_HTTPS_START

    if ($server_port !~ ){

        rewrite ^(/.*)$ https://$host$1 permanent;

    }

    #HTTP_TO_HTTPS_END

    ssl_certificate    /www/server/panel/vhost/cert/domain.com/fullchain.pem;

    ssl_certificate_key    /www/server/panel/vhost/cert/domain.com/privkey.pem;

    ssl_protocols TLSv1 TLSv1. TLSv1.;

    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

    ssl_prefer_server_ciphers on;

    ssl_session_cache shared:SSL:10m;

    ssl_session_timeout 10m;

    error_page   https://$host$request_uri;

    #SSL-END

    #ERROR-PAGE-START  错误页配置，可以注释、删除或修改

    #error_page  /.html;

    #error_page  /.html;

    #ERROR-PAGE-END

    #PHP-INFO-START  PHP引用配置，可以注释或修改

    include enable-php-.conf;

    #PHP-INFO-END

    #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效

    include /www/server/panel/vhost/rewrite/domain.com.conf;

    #REWRITE-END

    #禁止访问的文件或目录

    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)

    {

        return ;

    }

    #一键申请SSL证书验证目录相关设置

    location ~ \.well-known{

        allow all;

    }

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

        expires      30d;

        error_log off;

        access_log /dev/null;

    }

    location ~ .*\.(js|css)?$

    {

        expires      12h;

        error_log off;

        access_log /dev/null;

    }

    access_log  /www/wwwlogs/domain.com.log;

    error_log  /www/wwwlogs/domain.com.error.log;

}