nginx配置https

1.首先申请SSL证书（我用的是腾讯云的）

2.然后下载证书，并把nginx文件夹内的两个文件放在nginx的conf文件夹下

3.修改nginx的配置文件nginx.conf

#user  root;
worker_processes  2;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}
 
http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
 
        server {
        listen 80;
        large_client_header_buffers 4 16k;
        server_name group.huoyuntong.top;
        rewrite ^(.*) https://$server_name$1 permanent;
    }
    upstream group {
        server 120.79.245.180:8080;
    }
 
    server {
        listen       443;
        server_name  group.huoyuntong.top;
        ssl on;
        ssl_certificate      1_group.huoyuntong.top_bundle.crt;
        ssl_certificate_key  2_group.huoyuntong.top.key;
 
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
 
        location / {
            proxy_pass http://group;
        }
    }
 
}

4.开放443端口向所有ip，开放80、8080端口向本机ip