贴份nginx配置,如果是debian系列系统通过apt安装的,拿过去修改需要绑定的域名和对应域名的ssl证书路径,还有v2ray本地监听端口以及路径,并删除注释后可以直接用:
server {
listen 80 default; #80端口监听(可单独设置在一个http选项中)
listen 443 ssl http2; #443端口ipv4监听
listen [::]:443 ssl http2; #443端口ipv6监听
server_name example.com; #域名1
server_name www.example.com; #域名2(可选)
root /var/www/website1; #网站根目录
index index.html index.php index.htm;
client_max_body_size 10240M;
ssl_certificate "/etc/nginx/ssl/server.crt"; //证书位置
ssl_certificate_key "/etc/nginx/ssl/server.key"; //密钥位置
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_protocols TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
include /etc/nginx/default.d/*.conf;
location / {
try_files $uri $uri/ /index.php$is_args$args;
}
error_page 404 /404.html;
location = /40x.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
location ~ \.php$ {
fastcgi_pass 127.0.0.1:9000; //php-fpm-sock链接方式
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;
include fastcgi_params;
}
location /v2ray {
proxy_redirect off;
proxy_pass http://127.0.0.1:10000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $http_host;
}
}
|