nginx配置

user  www;
worker_processes  auto;
error_log  /usr/local/tengine/logs/error.log;

events {
    worker_connections  65535;
}

http {
    server_tokens  off;
    include       mime.types;
    default_type  application/octet-stream;
    log_format  main  '[$time_local] $remote_addr "$http_x_forwarded_for" $remote_port $remote_user '
                  '$host $upstream_addr $upstream_status $upstream_response_time $upstream_cache_status '
                  '"$request" $status $request_time $body_bytes_sent "$http_referer" "$http_user_agent" ';

    access_log  /usr/local/tengine/logs/${host}_access.log main;
    sendfile    on;
    tcp_nopush  on;

    keepalive_timeout  65;

    gzip  on;
    gzip_min_length 2k;
    gzip_comp_level 7;
    gzip_types gzip_types  text/css text/javascript application/javascript application/x-javascript application/xml image/png image/bmp image/jpeg image/jpg;
    server {
        listen 80 default_server;
        return 403 ;
    }

    include vhost/*.conf;
    include upstream/*.conf;
}

server {
        listen 80;
        server_name one.work.com;
        rewrite ^(.*) https://$server_name$1 permanent; (强转https)
}
server {
        listen 443 ssl;
        server_name one.work.com;
        index index.html index.htm index.php;
        include sslone.conf;   (ssl证书配置)
        ssl_protocols TLSv1.2;
        ssl_ciphers  ECDSA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!DH:!RC4;
        ssl_prefer_server_ciphers   on;
        location / {
                proxy_pass http://ones.sxftwork.com_upstream;
                include proxy.conf;
                client_max_body_size 100m;
                }
}

proxy_redirect off;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 256k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
proxy_temp_file_write_size 256k;
proxy_max_temp_file_size 8m;
proxy_headers_hash_bucket_size 128;
proxy_headers_hash_max_size 1024;

ssl on;
ssl_certificate   /usr/local/tengine/certs/one.work.com.pem;
ssl_certificate_key  /usr/local/tengine/certs/one.work.com.key;