配置nginx支持Https

配置nginx支持Https一定要先使用stop停止nginx然后重新代开不能使用reload

一：安装letsencrypt

1.从git上克隆下来
git clone https://github.com/letsencrypt/letsencrypt.git
2.切换到letsencrypt中
cd letsencrypt/

执行以下的命令（A/C）

./certbot-auto certonly --standalone --email 邮箱 -d 网址

成功后返回结果

二：nginx配置

　　

      server {
        listen ;
        #强制从http跳转到https
        server_name 域名;
        rewrite ^(.*) https://$server_name$1 permanent;
    }

    server {
        #暴露给外部访问的端口
        listen ;
        ssl                  on;

        ssl_certificate      /etc/letsencrypt/live/域名/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/域名/privkey.pem;

        ssl_session_timeout  5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1 TLSv1.;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers   on;

        server_name 域名;
        charset utf-;
        location / {
            include uwsgi_params;
            #外部访问80就转发到内部8000
            uwsgi_pass 127.0.0.1:;
        }
    }