Question

我正在尝试设置Nginx以将所有www.example.com和https://www.example.com请求重定向到https://example.com。这是我的配置：

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;

  server_name example.com;
  root /var/www/domain.com/system/nginx-root;

  ssl_certificate /home/user/.acme.sh/example.com/fullchain.cer;
  ssl_certificate_key /home/user/.acme.sh/example.com/domain.com.key;
  include /var/www/example.com/system/files/ssl-params.conf;

  location / {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $http_host;
    proxy_pass http://127.0.0.1:2368;

  }

  location ~ /.well-known {
    allow all;
  }

  client_max_body_size 50m;
}

以下是ssl-params.conf文件的内容：

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128$
ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off; # Requires nginx >= 1.5.9
ssl_stapling on; # Requires nginx >= 1.3.7
ssl_stapling_verify on; # Requires nginx => 1.3.7
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;

ssl_dhparam /var/www/example.com/system/files/dhparam.pem;

我可以访问example.com和https://example.com但是当我尝试使用www.example.com和https://www.example.com时，我在Chrome中遇到Your connection is not private错误，该网站被阻止。

任何人都可以帮我吗？

修改

我添加了此服务器块但没有帮助：

server {
    listen 80;
    listen 443 ssl;

    server_name www.example.com;

    ssl_certificate /home/user/.acme.sh/example.com/fullchain.cer;
    ssl_certificate_key /home/user/.acme.sh/example.com/example.com.key;
    include /var/www/example.com/system/files/ssl-params.conf;

    return 301 https://example.com$request_uri;
}

Nginx ssl强制www重定向到非www域

0 个答案: