機能追加 #774
管理画面http→httpsへリダイレクト
ステータス: | 解決 | 開始日: | 2016/05/17 | |
---|---|---|---|---|
優先度: | 高め | 期日: | ||
担当者: | 山本 義治 | 進捗 %: | 0% | |
カテゴリ: | ADMIN管理画面開発 | 作業時間の記録: | - | |
対象バージョン: | - |
説明
[root@web1 admin]# vi /etc/nginx/conf.d/ssl.conf # HTTPS server server { listen 80; server_name i-joji.com; return 301 https://$host$request_uri; } server { listen 443 ssl spdy; server_name i-joji.com; ssl_certificate /etc/nginx/conf.d/ssl/i-joji.com.crt; ssl_certificate_key /etc/nginx/conf.d/ssl/i-joji.com.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM; ssl_prefer_server_ciphers on; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; location / { proxy_pass https://localhost:3001/; } } [root@web1 admin]# /etc/init.d/nginx restart nginx を停止中: [ OK ] nginx を起動中: [ OK ]