# For more information on configuration, see:# * Official 中文版 documentation:http://nginx.org/en/docs/# * official Russian Documentation:http://nginx.org/ru/docs/user nginx;worker_processes 1;error_log/var/log/nginx/err Or.log, #error_log/var/log/nginx/error.log notice; #error_log/var/log/nginx/error.log INFO;PID/VAR/RUN/NGINX.P id;events {worker_connections 1024;} HTTP {include/etc/nginx/mime.types; Default_type Application/octet-stream; Log_format Main ' $remote _addr-$remote _user [$time _local] "$request" "$status $body _bytes_sent" $http _referer "'" $http _user_agent "" $http _x_forwarded_for "; Access_log/var/log/nginx/access.log main; Sendfile on; #tcp_nopush on; #keepalive_timeout 0; Keepalive_timeout 65; #gzip on; # Load config files from the/etc/nginx/conf.d directory # The default server was in Conf.d/default.conf include/etc /nginx/conf.d/*.conf; Upstream YZY_B2C {server 114.112.101.148; } server {Listen 80; server_name www.qixinglicai.com; Location/{Proxy_pass http://114.112.101.147:8080; Index index.htm; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; Proxy_connect_timeout 10; Proxy_read_timeout 120; } location ~*/usercenter/{rewrite ^ (. *) https://www.qixinglicai.com$1 permanent; } location ~*/userset/{rewrite ^ (. *) https://www.qixinglicai.com$1 permanent; } Location ~* (index\.ac|regist\.ac|selectuserbylog\.ac|transferdetail\.ac|transferdetail\.ac|checkfavoritepage\ . ac|selectallcommentsbyparty\.ac|refercomplaint\.ac|Getallletterforparty\.ac|getnewssubscriptionbypartyid\.ac|tophoneident\.ac) {Rewrite ^ (. *) Https://www.qixi Nglicai.com$1 permanent; } location ~*/(shoppingcart\.ac|shoppingcartlist\.ac|shoppingcartbyuser\.ac|shoppingcartbycontract\. Ac|payorder\.ac|sucpayorder\.ac|checkorder\.ac) {Rewrite ^ (. *) https://www.qixinglicai.com$1 permanent; }} # HTTPS server server {listen 443; server_name www.qixinglicai.com; SSL on; Ssl_certificate/usr/local/conf/mycert.cer; Ssl_certificate_key/usr/local/conf/mykey.key; Ssl_session_timeout 25m; Ssl_protocols SSLv3 TLSv1; Ssl_ciphers all:! Adh:! Export56:rc4+rsa:+high:+medium:+low:+sslv2:+exp; Ssl_prefer_server_ciphers on; Location ~*/usercenter/{Proxy_pass http://114.112.101.147:8080; Index Index.htm; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; Proxy_connect_timeout 10; Proxy_read_timeout 120; } location ~*/userset/{proxy_pass http://114.112.101.147:8080; Index index.htm; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; Proxy_connect_timeout 10; Proxy_read_timeout 120; } Location ~* (index\.ac|regist\.ac|selectuserbylog\.ac|transferdetail\.ac|transferdetail\.ac|checkfavoritepage\ . Ac|selectallcommentsbyparty\.ac|refercomplaint\.ac|getallletterforparty\.ac|getnewssubscripTIONBYPARTYID\.AC|TOPHONEIDENT\.AC) {Proxy_pass http://114.112.101.147:8080; Index index.htm; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; Proxy_connect_timeout 10; Proxy_read_timeout 120; } location ~*/(shoppingcart\.ac|shoppingcartlist\.ac|shoppingcartbyuser\.ac|shoppingcartbycontr ACT\.AC|PAYORDER\.AC|SUCPAYORDER\.AC|CHECKORDER\.AC) {Proxy_pass http://114.112.101.147:8080; Index index.htm; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; Proxy_connect_timeout 10; Proxy_read_timeout 120; } location ~ \. (css|js|gif|png|jpg) $ {proxy_pass http://114.112.101.147:8080; Proxy_set_header Host $host; Proxy_set_header X-real-ip $remote _addr; Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for; Proxy_set_header X-forwarded-proto $scheme; } location/{rewrite ^ (. *) http://www.qixinglicai.com$1 permanent; } }}
Nginx SSL Partial encryption