example.conf

# 负载均衡
upstream example-server {
    server 172.16.211.155:16600;
    server 172.16.211.156:16600;
    server 172.16.211.153:16600;
}

# http 自动转 https
server {
    listen       80;
    server_name  example.junmoyu.com;
    
    # 307 可以转发 POST 请求，301 不可以
    return 307 https://example.junmoyu.com$request_uri;
    # rewrite ^(.*)$  https://$host$1 permanent;
}

# HTTPS 反向代理
server {
    listen       443 ssl;
    server_name  example.junmoyu.com;
    ssl_certificate   /home/cert/5257519__junmoyu.com.pem;
    ssl_certificate_key  /home/cert/5257519__junmoyu.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    
    # 需要自定义专属的请求日志和错误日志
    access_log  /var/log/nginx/example/access.log;
    error_log /var/log/nginx/example/error.log;

    location /example/ {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        proxy_pass http://example-server/example/;    
    }
}

# 配置内网服务器访问
server {
    listen       80;
    server_name  example-inner.junmoyu.com;

    # 需要自定义专属的请求日志和错误日志
    access_log  /var/log/nginx/example/access.log;
    error_log /var/log/nginx/example/error.log;

    location /example/ {
        proxy_pass http://example-server/example/;
    }
}