# 一 安装
apt-get update
apt-get install nginx
y
systemctl status nginx.service

# 二 配置 https
mkdir -p /etc/nginx/certs
cd /etc/nginx/certs
# 证书文件 xxx.crt、xxx.key
vim /etc/nginx/conf.d/https.conf
# 配置 HTTPS 域名证书|Author:zc Date:2024-10-15
server {
    # 监听 443 端口, 用于 HTTPS 连接|Author:zc Date:2024-10-15
    listen 443 ssl;
    # 指定服务器名称|Author:zc Date:2024-10-15
    server_name yzc.com www.yzc.com;

    # SSL 证书和私钥文件的路径|Author:zc Date:2024-10-15
    ssl_certificate /etc/nginx/certs/yzc.com_server.crt;
    ssl_certificate_key /etc/nginx/certs/yzc.com_server.key;

    # SSL 配置选项|Author:zc Date:2024-10-15
    # 启用安全的 SSL/TLS 协议版本|Author:zc Date:2024-10-15
    ssl_protocols TLSv1.2 TLSv1.3;  
    # 指定加密套件|Author:zc Date:2024-10-15
    ssl_ciphers HIGH:!aNULL:!MD5;
    # 优先使用服务器端的加密算法|Author:zc Date:2024-10-15
    ssl_prefer_server_ciphers on;

    # 位置块, 用于定义不同的 URL 路径如何处理|Author:zc Date:2024-10-15
    location / {  
        # 尝试访问请求的 URI, 如果不存在则返回 404 错误|Author:zc Date:2024-10-15
        try_files $uri $uri/ =404;  
    }
}
nginx -t
systemctl restart nginx.service

# 三 配置 http 重定向 https
vim /etc/nginx/sites-available/default
server {
    listen 80;
    # HTTP 请求重定向到 HTTPS|Author:zc Date:2024-10-15
    return 301 https://$host$request_uri;
}
cutl -I http://yzc.com