Question

所以我在Digital Ocean上有一个网站，使用Nginx web服务器v.1.2.1并使用Wordpress CMS。之后我决定使用Cloudflare服务。 Cloudflare提供免费的灵活SSL，我想将它用于我的网站。

这是我网站的nginx配置：

server {
       listen 80;
       #listen [::]:80 ipv6only=on default_server;
       server_name pasangbatu.com www.pasangbatu.com;
       root /srv/www/pasangbatu.com/public_html;
       access_log /srv/www/pasangbatu.com/logs/access.log;
       error_log /srv/www/pasangbatu.com/logs/error.log;

       if ($http_host != "www.pasangbatu.com") {
                 rewrite ^ http://www.pasangbatu.com$request_uri permanent;
       }


       index index.php index.html;
       location = /favicon.ico {
                log_not_found off;
                access_log off;
       }
       location = /robots.txt {
                allow all;
                log_not_found off;
                access_log off;
       }

    # Use gzip compression
    # gzip_static on; # Uncomment if you compiled Nginx using --with-http_gzip_static_module
    gzip on;
    gzip_disable "msie6";
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 5;
    gzip_buffers 16 8k;
    gzip_http_version 1.0;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript image/png image/gif image/jpeg;

        #location ~ ^/wp-content/cache/minify/[^/]+/(.*)$ {
        #        try_files $uri /wp-content/plugins/w3-total-cache/pub/minify.php?file=$1;
        #}

    #location ~ ^/wp-content/plugins/wp-minify/min/[^/]+/(.*)$ {
    #   try_files $uri /wp-content/plugins/w3-total-cache/pub/minify.php?file=$1;
    #   wp-minify/cache
    #}

    # Don't cache uris containing the following segments
    if ($request_uri ~* "(\/wp-admin\/|\/xmlrpc.php|\/wp-(app|cron|login|register|mail)\.php|wp-.*\.php|index\.php|wp\-comments\-popup\.php|wp\-links\-opml\.php|wp\-locations\.php)") {
        set $cache_uri "no cache";
    }

    # Don't use the cache for logged in users or recent commenters
    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp\-postpass|wordpress_logged_in") {
        set $cache_uri 'no cache';
    }



    # Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
       location ~ /\. {
                deny all;
                access_log off;
                log_not_found off;
       }
       location / {
                try_files $uri $uri/ /index.php?$args;
       }

       # Add trailing slash to */wp-admin requests.
       rewrite /wp-admin$ $scheme:http://$host$uri/ permanent;

    # Cache static files for as long as possible - removed xml as an extension to avoid problems with Yoast WordPress SEO plugin which uses WP rewrite API.
    location ~* \.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|css|rss|atom|js|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
        try_files $uri =404;
        expires max;
        access_log off;
    }

    # Pass PHP scripts on to PHP-FPM
    location ~* \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        try_files $uri /index.php;
        fastcgi_index index.php;
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        #fastcgi_pass 127.0.0.1:9000;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param SCRIPT_NAME $fastcgi_script_name;
      }
}

我试图将if ($http_host !="www.pasangbatu.com") {更改为以下内容：

if ($http_host != "www.pasangbatu.com") {
                     rewrite ^ https://www.pasangbatu.com$request_uri permanent;
           }

我重新启动nginx并刷新我的网页，我在主页上启用了ssl。但如果我转到另一个页面/单击文章链接，该页面将返回http协议而不是https。

如果我禁用if condition block并且只是这样写：

rewrite ^ https://www.pasangbatu.com$request_uri permanent;

我的网站返回“To many redirect bla bla bla”。

如何为我的所有网页启用https？需要你的帮助，

感谢。

Answer 1

所以基本上这个问题归结为当使用灵活SSL时，您的Web服务器通过HTTP看到连接（同时从源到浏览器的连接是通过HTTPS）。

为了解决这个问题，您需要在Nginx配置中挂钩X-Forwarded-Proto标题。

像CloudFlare Flexible SSL plugin这样的插件也可能对您有用。

使用CloudFlare's Page Rules，您可以有效redirect HTTP to HTTPS traffic。

实施SSL（数字海洋+ Nginx + Cloudflare）

1 个答案: