機能追加 #774
管理画面http→httpsへリダイレクト
| ステータス: | 解決 | 開始日: | 2016/05/17 | |
|---|---|---|---|---|
| 優先度: | 高め | 期日: | ||
| 担当者: | 山本 義治 | 進捗 %: | 0% | |
| カテゴリ: | ADMIN管理画面開発 | 作業時間の記録: | - | |
| 対象バージョン: | - |
説明
[root@web1 admin]# vi /etc/nginx/conf.d/ssl.conf
# HTTPS server
server {
listen 80;
server_name i-joji.com;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl spdy;
server_name i-joji.com;
ssl_certificate /etc/nginx/conf.d/ssl/i-joji.com.crt;
ssl_certificate_key /etc/nginx/conf.d/ssl/i-joji.com.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
ssl_prefer_server_ciphers on;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
location / {
proxy_pass https://localhost:3001/;
}
}
[root@web1 admin]# /etc/init.d/nginx restart
nginx を停止中: [ OK ]
nginx を起動中: [ OK ]