antisaWiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
{{tag>webserver nginx}}

====== nginx http to https config ======
Non-http file config

<code nginx>
server {
    server_name example.com;
    listen 80;

    return 301 https://$host$request_uri;
</code>


Example https config:

<code nginx>
server {
    listen 443 default_server ssl;
    listen  [::]:443 default_server ssl ipv6only=on;
	# SSL encryption parameters
        ssl                     on;
        ssl_protocols           TLSv1.2;
        ssl_session_cache       shared:SSL:10m;
        ssl_session_timeout     10m;
        ssl_prefer_server_ciphers on;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256;
        ssl_certificate /etc/nginx/ssl/example.crt;
        ssl_certificate_key /etc/nginx/ssl/example.key;
    
    # proxied routes
    location / {
        proxy_pass http://localhost:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection keep-alive;
        proxy_set_header Host $http_host;
        proxy_cache_bypass $http_upgrade;
        proxy_connect_timeout       120;
        proxy_send_timeout          120;
        proxy_read_timeout          120;
        send_timeout                120;
    }

    location /signalr {
	proxy_pass http://localhost:8080;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_set_header Host $host;
	proxy_cache_bypass $http_upgrade;
        proxy_connect_timeout       120;
        proxy_send_timeout          120;
        proxy_read_timeout          120;
        send_timeout                120;
    }
}
</code>

====== Tested on ======
  * 

====== See also ======

====== References ======