server {
listen 80;
listen [::]:80;
server_name www.xxxx.com;
return 301 https://server_nameservernamerequest_uri;
}

server {
listen 443 ssl http2; # 开启 https 和 http2
listen [::]:443 ssl http2; # 支持 ipv6
server_name www.xxxx.com;
root /www/wwwroot;

ssl 证书路径配置

ssl_certificate /www/.ssl/xxxx.com_bundle.crt;
ssl_certificate_key /www/.ssl/xxxx.com.key;

设置字符集

charset utf-8;

gzip 相关配置

gzip on;
gzip_vary on;
gzip_min_length 1k;
gzip_types text/plain application/xml text/css application/javascript;

代理服务的话，开启下面代码

# location / {

# proxy_redirect off;

# proxy_set_header Host $host;

# proxy_set_header X-Real-IP $remote_addr;

# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

# proxy_set_header X-Forwarded-Proto $scheme;

# proxy_read_timeout 1m;

# proxy_connect_timeout 1m;

# proxy_pass http://127.0.0.1:3000;

# }

location ~ /\.(?!well-known).\* {
deny all;
}
}