server { listen 80; server_name jimv.your-domain; access_log /var/log/nginx/jimv.access.log; error_log /var/log/nginx/jimv.error.log; # listen 443; # ssl on; # ssl_certificate /etc/jimv/keys/jimv.your.crt; # ssl_certificate_key /etc/jimv/keys/jimv.your.key; # ssl_session_cache shared:le_nginx_SSL:1m; # ssl_session_timeout 1440m; # ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL; # ssl_prefer_server_ciphers on; root /home/www/sites/JimV-C; # 拒绝访问隐藏文件(如:.git、.svn等目录) location ~ /\..* { return 403; } location ~ .(sql|py|pyc|ini|conf|log|svn|git|cfg)$ { return 403; } location / { try_files $uri @inner; } location @inner { proxy_pass http://127.0.0.1:8008; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } # Redirect non-https traffic to https # if ($scheme != "https") { # return 301 https://$host$request_uri; # } } }