在Express上使用ngix和ssl实施的反向代理失败

您需要侦听端口443并配置nginx以使用某些证书。

就像是：

server {    listen 443;    server_name example.com;    add_header Strict-Transport-Security "max-age=3600";    ssl on;    ssl_certificate /.../chained2.pem;    ssl_certificate_key /.../domain.key;    ssl_session_timeout 5m;    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA;    ssl_session_cache shared:SSL:50m;    ssl_prefer_server_ciphers on;    location / {        proxy_pass http://localhost:3001;        proxy_http_version 1.1;        proxy_set_header Upgrade $http_upgrade;        proxy_set_header Connection "upgrade";        proxy_set_header Host $host;    }}

将正确的路径添加到您的.pem和.key文件。您可以从Let’s Encrypt免费获得证书。