11server {
2- listen 8080 ;
3- server_name localhost;
4- root /tmp/hydro/public;
2+ listen 443 ssl http2;
3+ listen [::]:443 ssl http2;
4+ server_name hydro.ac;
5+ root /root /.hydro/static;
6+ access_log /data/access.log combined buffer=512k flush=1m ;
7+ error_log /data/error.log warn;
8+
9+ gzip on;
10+ gzip_vary on;
11+ gzip_proxied any;
12+ gzip_comp_level 6;
13+ gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
14+
15+ # If you have brotli module installed
16+ # brotli on;
17+ # brotli_comp_level 6;
18+ # brotli_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
19+
20+ # ssl_certificate /path/to/hydro.ac/fullchain.pem;
21+ # ssl_certificate_key /path/to/hydro.ac/privkey.pem;
22+ # ssl_trusted_certificate /path/to/hydro.ac/chain.pem;
23+
24+ # You may want to enable this if nginx reports '[emerg] unknown "connection_upgrade" variable'
25+ # ref: https://blog.tsinbei.com/en/archives/677/
26+ # map $http_upgrade $connection_upgrade {
27+ # default upgrade;
28+ # '' close;
29+ # }
530
631 location / {
732 try_files $uri @proxy_to_app;
@@ -16,4 +41,23 @@ server {
1641 proxy_set_header X-Forwarded-For $remote_addr ;
1742 proxy_set_header X-Forwarded-Proto $scheme ;
1843 }
19- }
44+ }
45+
46+ server {
47+ listen 443 ssl http2;
48+ listen [::]:443 ssl http2;
49+ server_name www.hydro.ac;
50+
51+ # ssl_certificate /path/to/www.hydro.ac/fullchain.pem;
52+ # ssl_certificate_key /path/to/www.hydro.ac/privkey.pem;
53+ # ssl_trusted_certificate /path/to/www.hydro.ac/chain.pem;
54+ return 301 https://hydro.ac$request_uri ;
55+ }
56+
57+ server {
58+ listen 80 ;
59+ listen [::]:80 ;
60+ server_name .hydro.ac;
61+
62+ return 301 https://hydro.ac$request_uri ;
63+ }
0 commit comments