个人网盘seafile启用HTTPS[nginx]

5,630 views次阅读

修改 Nginx 配置文件

#-------------------------------------pan.cloudcared.cn--------------------------------------
server {
    listen       80;
    server_name  pan.cloudcared.cn;
    rewrite ^ https://$http_host$request_uri? permanent;   #强制http重定向至https
}
server {
    listen       443;
    server_name  pan.cloudcared.cn;
    ssl on;
    ssl_certificate /usr/local/nginx/key/pan.cloudcared.cn.pem;   #pem文件路径
    ssl_certificate_key /usr/local/nginx/key/pan.cloudcared.cn.key; #key文件路径
    ssl_session_timeout 5m;
    ssl_protocols SSLv2 SSLv3 TLSv1;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    ssl_prefer_server_ciphers on;

    proxy_set_header X-Forwarded-For $remote_addr;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
    server_tokens off;

    location / {
    	proxy_pass http://127.0.0.1:8000;       #前台站点重定向至本地8000端口
	proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-Proto https;
    }
    location /seafhttp {                        
        rewrite ^/seafhttp(.*)$ $1 break;
        proxy_pass http://127.0.0.1:8082;       #上传/下载文件重定向至本地8082端口
        client_max_body_size 0;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_connect_timeout  36000s;
        proxy_read_timeout  36000s;
        proxy_send_timeout  36000s;
        send_timeout  36000s;
    }
    location /media {
        root /var/www/html/seafile-server-latest/seahub;
    }
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

#-------------------------------------pan.cloudcared.cn--------------------------------------

server {

listen 80;

server_name pan.cloudcared.cn;

rewrite ^ https://$http_host$request_uri? permanent; #强制http重定向至https

}

server {

listen 443;

server_name pan.cloudcared.cn;

ssl on;

ssl_certificate /usr/local/nginx/key/pan.cloudcared.cn.pem; #pem文件路径

ssl_certificate_key /usr/local/nginx/key/pan.cloudcared.cn.key; #key文件路径

ssl_session_timeout 5m;

ssl_protocols SSLv2 SSLv3 TLSv1;

ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

ssl_prefer_server_ciphers on;

proxy_set_header X-Forwarded-For $remote_addr;

add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

server_tokens off;

location / {

proxy_pass http://127.0.0.1:8000; #前台站点重定向至本地8000端口

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Host $server_name;

proxy_set_header X-Forwarded-Proto https;

}

location /seafhttp {

rewrite ^/seafhttp(.*)$ $1 break;

proxy_pass http://127.0.0.1:8082; #上传/下载文件重定向至本地8082端口

client_max_body_size 0;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_connect_timeout 36000s;

proxy_read_timeout 36000s;

proxy_send_timeout 36000s;

send_timeout 36000s;

}

location /media {

root /var/www/html/seafile-server-latest/seahub;

}

重新加载nginx

nginx -t
nginx -s reload

1 2	nginx -t nginx -s reload

修改 SERVICE_URL 和 FILE_SERVER_ROOT

下面还需要更新 SERVICE_URL 和 FILE_SERVER_ROOT 这两个配置项。否则无法通过 Web 正常的上传和下载文件。

5.0 版本开始，您可以直接通过管理员 Web 界面来设置这两个值 (注意，如果同时在 Web 界面和配置文件中设置了这个值，以 Web 界面的配置为准。)：

启动 Seafile 和 Seahub

./seafile.sh start
./seahub.sh start # 如果你使用 fastcgi 请使用此命令`./seahub.sh start-fastcgi`

1 2	./seafile.sh start ./seahub.sh start # 如果你使用 fastcgi 请使用此命令`./seahub.sh start-fastcgi`

发表于：Cloud

2018-05-31

# Linux # 其他

复制链接

转载提示：除特殊说明外本站文章皆由CC-4.0协议发布，转载请注明出处。

[腾讯云]STS（Security Token Service）简单使用

[阿里云]WAF+CDN+DDOS IP同时接入

[AWS]根账户激活MFA多因子认证配置

Python 实现上传 RDS 备份至阿里云 OSS

TCP 为什么是三次握手，而不是两次或四次？

情感天地情感检测评论达人LV.1

2018-07-09 16:09:48 回复

阅读感很舒爽