如何让 nginx 既充当代理又充当 Web 服务器？

Question

我已将 nginx 设置为 ssl 反向代理，以使用 apache 后端进行清漆，它运行良好，但现在我需要 nginx 充当一个目录的 Web 服务器。

server {
    listen 10.0.0.20:80;
    server_name example.com www.example.com;
    return 301 https://www.example.com$request_uri;
}


server {
    listen 10.0.0.20:443 ssl spdy backlog=16384;
        server_name example.com www.example.com;
        server_name_in_redirect off;
        ssl    on;
        ssl_certificate    /home/ubuntu/mydomain-ssl/mydomain.crt;
        ssl_certificate_key    /home/ubuntu/mydomain-ssl/mydomain.key;
        ssl_dhparam /home/ubuntu/mydomain-ssl/dh2048.pem;
        ssl_prefer_server_ciphers on;
        ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL;
        ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
        ssl_session_cache shared:SSL:2m;
        ssl_session_timeout 5m;
        ssl_stapling on;
        ssl_stapling_verify on;
        add_header Public-Key-Pins 'pin-sha256="gFcziPQKxI10QgFcziPQKxI10QgFcziPQKxI10QgFcziPQKxI10Q"; pin-sha256="gFcziPQKxI10QgFcziPQKxI10QgFcziPQKxI10QgFcziPQKxI10Q";  max-age=5184000; includeSubDomains';
        add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
        add_header X-Frame-Options SAMEORIGIN;
        add_header  X-Content-Type-Options "nosniff";
        add_header X-XSS-Protection "1; mode=block";

        location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            proxy_headers_hash_max_size 1024;
            proxy_headers_hash_bucket_size 128;
            proxy_pass http://127.0.0.1:80;
            proxy_set_header X-Forwarded-Proto https;
            proxy_set_header X-Forwarded-Port 443;
            proxy_set_header X-Forwarded-Protocol $scheme;
        }
}

如果有人可以展示一个简单的示例，说明我如何将目录 /directory/ 作为此配置的一部分提供服务，那将非常有帮助，我尝试通过添加额外的位置块进行配置，但它不起作用，我刚刚得到访问目录时出现 404 错误。

Answer 1

您可以有一个将流量重定向到 https 的默认位置和一个只提供文件的更具体的位置：

server {
    listen 10.0.0.20:80;
    server_name example.com www.example.com;

    # absolute path to your directory
    root /var/www/www.example.com/directory;

    location / {
        return 301 https://www.example.com$request_uri; 
    }

    location /directory/ {
        try_files $uri $uri/ =404;
    }
}