https://nginx.org/

“Nginx 是一个高性能的 HTTP 和反向代理服务器，也可以作为负载均衡器、HTTP缓存、邮件代理等使用。它最初由 Igor Sysoev 开发，设计目标是高性能、高并发、低资源消耗，广泛用于Web服务器和代理服务器的解决方案。”

freedomain免费域名及其送的免费域名ssl

1、申请freedomain免费域名，域名A解析到nginx服务ip
2、申请这个免费的二级的域名,可以免费申请这个二级域名ssl，下载它的文件zip(三个文件，已经写在下面的配置里)
3、在服务器上安装配置nginx

• 配置https
• 配置反向代理（80->服务端口）

yum install nginx -y
vim /etc/nginx/nginx.conf

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

include /usr/share/nginx/modules/*.conf;

events {
	worker_connections 1024;
}

http {
	log_format main
		'$remote_addr - $remote_user [$time_local] "$request" '
		'$status $body_bytes_sent "$http_referer" '
		'"$http_user_agent" "$http_x_forwarded_for"';

	access_log /var/log/nginx/access.log main;

	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 4096;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	include /etc/nginx/conf.d/*.conf;

	server {
		listen 443 ssl;
		server_name spark.publicvm.com;

		ssl_certificate /etc/nginx/ssl/spark.publicvm.com.cer; # 服务器证书文件路径
		ssl_certificate_key /etc/nginx/ssl/spark.publicvm.com.key; # 私钥文件路径
		ssl_trusted_certificate /etc/nginx/ssl/ca.cer; # CA 根证书路径（可选）

		ssl_protocols TLSv1.2 TLSv1.3; # 启用的 SSL/TLS 协议
		ssl_ciphers HIGH:!aNULL:!MD5; # 加密套件设置

		location / {
			proxy_pass http://127.0.0.1:54321; # 指向你的后端服务
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
		}
	}
}