nginx 反向代理https配置

配置nginx 反向代理https

server {
listen       443 ;#ssl http2 default_server;
server_name  xxxx.com;

#    access_log  logs/quancha.access.log  main;
#    error_log  logs/quancha.error.log;
#root   html;
#index  login_page.php  index.html index.htm index.php;

## send request back to apache ##
ssl                  on;
ssl_certificate      /xxxx.com_bundle.crt;
ssl_certificate_key  /xxxx.com.key;

ssl_session_timeout  5m;
ssl_protocols  SSLv2 SSLv3 TLSv1.2;
#ssl_ciphers  HIGH:!aNULL:!MD5;
ssl_ciphers     ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256:AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
ssl_prefer_server_ciphers   on;

location / {
#Proxy Settings
proxy_redirect     off;
proxy_set_header   Host             $host;
proxy_set_header   X-Real-IP        $remote_addr;
proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
#proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
#proxy_max_temp_file_size 0;
#proxy_connect_timeout      90;
#proxy_send_timeout         90;
#proxy_read_timeout         90;
#proxy_buffer_size          4k;
#proxy_buffers              4 32k;
#proxy_busy_buffers_size    64k;
#proxy_temp_file_write_size 64k;

proxy_pass  https://192.168.1.11:443/; break;

}
}