我的最近也在玩这个,但是总是不生效,希望大神指教,我的配置如下:(我这样配置是有问题的,希望大神们指正)
server {
listen 24766;
listen 443 ssl;
ssl_certificate /opt/zs/33iq.crt;
ssl_certificate_key /opt/zs/33iq.key;
root /var/www/star_p/current/;
location / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_pass http://star_p;
} }
server {
listen 24766;
server_name demo.star.net;
rewrite ^ https://$server_name$request_uri permanent;
}
参考: https://github.com/80percent/rails-template/blob/master/files/config/nginx.conf.example ,这是个 http 的配置,https 的自己再搜一下吧,很简单。拿去不谢
分别:
listen 443 ssl;
listen 80;
但是你的 http 里面是跳转成 https。
还有 根据你 ssl 证书的要求修改一下支持的协议和加密算法
ssl on;
ssl_certificate /opt/zs/33iq.crt;
ssl_certificate_key /opt/zs/33iq.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:HIGH:!aNULL:!MD5:!ADH:!DH;
ssl_prefer_server_ciphers on;
你配置文件贴的不全吧。
楼主参考这个网页的设置,关键点是 proxy_set_header X-Forwarded-Proto https; https://www.digitalocean.com/community/questions/error-too-many-redirect-on-nginx
I just had the exact same problem after enabling SSL. The issue for me was I have Rails set to config.force_ssl = true which relies on the proxy_set_header X-Forwarded-Proto https; header to know whether the request was over SSL or not. I didn't have that header to Rails would receive an SSL request thinking it wasn't with SSL which caused it to redirect to https.
Here's my working config:
upstream puma {
server unix:///home/deploy/apps/genus/shared/tmp/sockets/genus-puma.sock;
}
server {
listen 80;
listen 443 ssl;
server_name genusapp.com;
ssl_certificate /home/deploy/apps/genus/genusapp_com.pem;
ssl_certificate_key /home/deploy/apps/genus/genusapp_com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL;
root /home/deploy/apps/genus/current/public;
access_log /home/deploy/apps/genus/current/log/nginx.access.log;
error_log /home/deploy/apps/genus/current/log/nginx.error.log info;
location ^~ /assets/ {
gzip_static on;
expires max;
add_header Cache-Control public;
}
try_files $uri/index.html $uri @puma;
location @puma {
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_redirect off;
proxy_pass http://puma;
}
error_page 500 502 503 504 /500.html;
client_max_body_size 10M;
keepalive_timeout 10;
}
#9 楼 @starshine 非 80 端口不清楚。不过我知道你的配置肯定缺少 proxy_set_header X-Forwarded-Proto https,楼主多尝试,成功后求分享经验