linux:nginx
差别
两侧同时换到之前的修订记录前一修订版后一修订版 | 前一修订版 |
linux:nginx [2016/11/08 13:41] – [Installation] memory | linux:nginx [2023/12/03 02:24] (当前版本) – 外部编辑 127.0.0.1 |
---|
- https://cipherli.st/ 自动生成合适的SSL配置 | - https://cipherli.st/ 自动生成合适的SSL配置 |
- https://imququ.com/post/sth-about-switch-to-https-2.html 关于启用 HTTPS 的一些经验分享 | - https://imququ.com/post/sth-about-switch-to-https-2.html 关于启用 HTTPS 的一些经验分享 |
| |
| An example ssl configuration: |
| |
| <code nginx ssl.conf> |
| ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
| ssl_session_cache shared:SSL:50m; |
| ssl_session_timeout 1d; |
| # openssl dhparam -out dhparams.pem 2048 |
| ssl_dhparam /etc/nginx/ssl/dhparams.pem; |
| |
| ssl_prefer_server_ciphers on; |
| ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA128:DHE-RSA-AES128-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA128:ECDHE-RSA-AES128-SHA384:ECDHE-RSA-AES128-SHA128:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA384:AES128-GCM-SHA128:AES128-SHA128:AES128-SHA128:AES128-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"; |
| </code> |
| |
| ===== Snippets ===== |
| |
| ==== Redirect naked domain to www ==== |
| |
| Remember to replace ''[name]'' to your own domain |
| |
| <code nginx redirect.conf> |
| server { |
| listen 80; |
| server_name [domain]; |
| |
| rewrite ^(.*)$ $scheme://www.[domain]$1 permanent; |
| } |
| </code> |
| |
linux/nginx.1478612510.txt.gz · 最后更改: (外部编辑)