proxy_set_header X-Forwarded-For $remote_addr; client_max_body_size 2000m; #keepalive_timeout 300; server { listen 80; listen 443 ssl http2; server_name app.hehelucky.cn; index index.html index.htm default.htm default.html; root /data/fir_client; if ($server_port !~ 443){ rewrite ^(/.*)$ https://$host$1 permanent; } ssl_certificate /etc/nginx/conf.d/app.hehelucky.cn.pem; ssl_certificate_key /etc/nginx/conf.d/app.hehelucky.cn.key; ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; error_page 497 https://$host$request_uri; # 如果未开启token 授权,可以启动下面配置,直接让nginx读取资源,无需 uwsgi 进行转发 # location ~ ^/download/ { # root /data/flyapp/fir_ser/; # rewrite ^/download/(.*) /files/$1 break; # } # 如果使用cdn,需要配置该选项 #set_real_ip_from 0.0.0.0/0; #real_ip_header X-Forwarded-For; location ~ ^/(download|api|files|udid|captcha|show_udid|flower) { uwsgi_send_timeout 300; # 指定向uWSGI传送请求的超时时间,完成握手后向uWSGI传送请求的超时时间。 uwsgi_connect_timeout 300; # 指定连接到后端uWSGI的超时时间。 uwsgi_read_timeout 300; # 指定接收uWSGI应答的超时时间,完成握手后接收uWSGI应答的超时时间。 include uwsgi_params; uwsgi_pass flyapps:8898; uwsgi_param UWSGI_SCRIPT wsgi; } location ~ ^/(index|apps|user|login|register|supersign|home) { try_files $uri $uri/ /index.html; } location / { try_files $uri $uri/ /short.html; } #禁止访问的文件或目录 location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md) { return 404; } location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ { expires 30d; error_log off; access_log /dev/null; } location ~ .*\.(js|css)?$ { expires 12h; error_log off; access_log /dev/null; } }