Nginx 笔记

根据 pem 生成 crt 文件 openssl x509 -in cret.pem -out cret.crt

多域名多证书配置
就是添加多个相同linsten的server

http {
    
    # http 重定向至 https 
    server {
           listen 80;
           server_name domain.cn www.domain.cn;
           return 301 https://domain.cn$request_uri;
   }

    server {
           listen 80;
           server_name domain.cn www.domain.cn;
           return 301 https://domain.cn$request_uri;
   }

   # Settings for a TLS enabled server.
    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  domain.cn www.domain.cn;

        ssl_certificate "/etc/nginx/cert/domain.cn/domain_cn.crt";
        ssl_certificate_key "/etc/nginx/cert/domain.cn/domain.cn.key";
        
        location / {
            root /var/www/html;
            index index.html;
            # 防止浏览器刷新404
            try_files $uri $uri/ /index.html;
        }
    }

    server {
        listen       443 ssl http2;
        listen       [::]:443 ssl http2;
        server_name  domain.com www.domain.com;

        ssl_certificate "/etc/nginx/cert/domain.com/domain_com.crt";
        ssl_certificate_key "/etc/nginx/cert/domain.com/domain.com.key";
        
        location / {
            root /var/www/html;
            index index.html;
            try_files $uri $uri/ /index.html;
        }
}