https

鲜彤
1 parent 28f274f3
Showing 3 changed files with 48 additions and 30 deletions
conf/nginx/conf.d/k-boxing.vchangyi.com.conf
php/php56/Dockerfile
php/php56/redis-3.1.4.tgz
 server {
     listen 80;
-    error_log  /var/log/nginx/qy.nginx_error.log error;
-    server_name k-boxing.vchangyi.com;
+    server_name k-boxing-rp-topic-api.vchangyi.com;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name k-boxing-rp-topic-api.vchangyi.com;
     index index.html index.htm index.php;
     root /var/www/html/k-boxing.vchangyi.com/www;
-    location ~* ^.+.(jpg|jpeg|gif|css|png|js|ico|thumb|xml|swf|txt|woff|ttf|eot|svg|otf|htm|html|apk|map)$ {
+
+    # error_log /var/log/nginx/qy.nginx_error.log error;
+    ssl on;
+    ssl_certificate /etc/nginx/conf.d/certs/changyi/1_vchangyi.com_bundle.crt;
+    ssl_certificate_key /etc/nginx/conf.d/certs/changyi/2_vchangyi.com.key;
+    ssl_prefer_server_ciphers on;
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
+    add_header Strict-Transport-Security max-age=31536000;
+
+    location ~* ^.+1\.php$ {
+        access_log /dev/null;
+    }
+    location ~* ^.+loadbalanceStatus\.html$ {
+        access_log /dev/null;
+    }
+
+    location ~* ^.+.(xls|jpg|jpeg|gif|css|png|js|ico|thumb|xml|swf|txt|woff|ttf|eot|svg|otf|htm|html|apk|map)$ {
         # 微信前端 h5
         if ($request_uri ~ ^/([^/]+)/([^/]+)/h5/index.html) {
             rewrite ^/([^/]+)/([^/]+)/h5 /$2/h5/index.html break;
         }
-
         if ($request_uri ~ ^/([^/]+)/([^/]+)/h5/index-dev.html) {
             rewrite ^/([^/]+)/([^/]+)/h5 /$2/h5/index-dev.html break;
         }
-
         if ($request_uri ~ ^/([^/]+)/([^/]+)/h5/(.*)(jpg|jpeg|gif|css|png|js|ico|thumb|xml|swf|txt|woff|ttf|eot|svg|otf|apk)) {
             rewrite ^/([^/]+)/([^/]+)/h5/(.*) /$2/h5/$3 break;
         }
-
         access_log /dev/null;
         expires 10d;
     }
  
     location / {
-        index index.html index.htm index.php;
-        access_log /var/log/nginx/k-boxing.vchangyi.com-access.log combined buffer=32k;
-
         if ($request_uri ~ ^/([^/]+)/([^/]+)/h5) {
             rewrite ^/([^/]+)/([^/]+)/h5 /$2/h5/index.html break;
         }
-
+        if ($request_uri = /) {
+            rewrite ^/ https://$host/admincp/ break;
+        }
+        if ($request_uri ~ ^/(\#|\?)) {
+            rewrite ^/ https://$host/admincp/ break;
+        }
         if ($request_uri ~ ^/admincp) {
-            rewrite ^/admincp /admincp/index.html break;
+            break;
         }
-
         if (!-e $request_filename) {
             rewrite ^/(.*)$ /index.php last;
             break;
         }
     }
-
     location ~ [^/]\.php(/|$) {
-        try_files $uri =404;
-        chunked_transfer_encoding off;
-        # fastcgi_pass 127.0.0.1:9000;
-        # fastcgi_pass unix:/tmp/php-cgi.sock;
+        #try_files $uri =404;
         fastcgi_pass fpm:9000;
         fastcgi_index index.php;
         include fastcgi.conf;
-
         # 设置 PATH_INFO 并改写 SCRIPT_FILENAME, SCRIPT_NAME 服务器环境变量
         set $path_info "";
         set $real_script_name $fastcgi_script_name;
@@ -56,24 +71,20 @@ server {
             set $real_script_name $1;
             set $path_info $2;
         }
-
+        fastcgi_param HTTP_HOST 'k-boxing-rp-topic-api.vchangyi.com';
         fastcgi_param PATH_INFO $path_info;
         fastcgi_param SCRIPT_FILENAME $document_root$real_script_name;
         fastcgi_param SCRIPT_NAME $real_script_name;
     }
-
-    location /nginx_status {
-        stub_status on;
-        access_log off;
-    }
-
-    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
+    location ~ .*\.(jpg|jpeg|gif|css|png|js|ico|thumb|xml|swf|txt|woff|ttf|eot|svg|otf|htm|html|apk|map)$ {
         expires 30d;
+        access_log /dev/null;
     }
-
     location ~ .*\.(js|css)?$ {
-        expires 12h;
+        expires 1d;
+        access_log /dev/null;
     }
  
-    access_log off;
-}
 \ No newline at end of file
+    #access_log /data/wwwlogs/k-boxing.vchangyi.com-access$log_date.log;
+    #access_log /data/wwwlogs/k-boxing.vchangyi.com-access.log access;
+}
@@ -123,3 +123,10 @@ RUN apt-get update \
 #    && apt-get install -y libmemcached-dev zlib1g-dev \
 #    && pecl install memcached-2.2.0 \
 #    && docker-php-ext-enable memcached
+COPY ./redis-3.1.4.tgz /tmp/
+RUN cd /tmp/ \
+        && tar -xf redis-3.1.4.tgz \
+		&& rm redis-3.1.4.tgz \
+        && ( cd redis-3.1.4 && phpize && ./configure && make && make install ) \
+        && rm -r redis-3.1.4 \
+        && docker-php-ext-enable redis
 \ No newline at end of file