nginx.conf

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        /etc/nginx/logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    fastcgi_intercept_errors on;

    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
    #server {
    #   listen  80;
    #   server_name zshipu.com;
    #   location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

    # HTTPS server
    #
    server {
        listen       443 ssl;
        server_name  zshipu.com;

        ssl_certificate      /etc/letsencrypt/live/zshipu.com/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/zshipu.com/privkey.pem;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols  TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;
     
        error_page 404 = https://zshipu.com/404.html;
        error_page 500 502 503 504 = /50x.html;

        location / {
            root   html;
            index  index.html index.htm;
        }

        location /pushtsua {
          proxy_pass   http://127.0.0.1:5040;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        location /admin {
          proxy_pass   http://127.0.0.1:4000;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /adminread {
          proxy_pass   http://127.0.0.1:4001;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /admintlg {
          proxy_pass   http://127.0.0.1:4002;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }


        location /txpadmin {
          proxy_pass   http://127.0.0.1:4004;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /adminm {
          proxy_pass   http://127.0.0.1:4003;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }


        location /createArticle {
          proxy_pass   http://127.0.0.1:5050;
          auth_basic "Please input password";
          auth_basic_user_file /etc/nginx/passwd;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /taoqb/ {
          proxy_pass   http://127.0.0.1:3333;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /nuxtblog/ {
          proxy_pass   http://127.0.0.1:3334;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

        location /adminm/api/posts/list {
          proxy_pass   http://127.0.0.1:4003;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
          expires 300d;
        }

    }

    server {
       listen  80;
       server_name zshipu.com;
       if ($scheme = http ) {
          return 301 https://zshipu.com$request_uri; 
       }
       #return 301 https://zshipu.com$request_uri;
    }

    server {
        listen       443 ssl;
        server_name  www.zshipu.com;

        ssl_certificate      /etc/letsencrypt/live/zshipu.com/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/zshipu.com/privkey.pem;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;


        error_page 404 = https://zshipu.com/404.html;
        error_page 500 502 503 504 = /50x.html;

        location / {
            root   html;
            index  index.html index.htm;
        }

        location /pushtsua {
          proxy_pass   http://127.0.0.1:5040;
          proxy_set_header Host $http_host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Real-Port $remote_port;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }

    }

    server {
       listen  80;
       server_name www.zshipu.com;
       if ($scheme = http ) {
          return 301 https://www.zshipu.com$request_uri;
       }
       #return 301 https://zshipu.com$request_uri;
    }


    server {
        listen       443 ssl;
        server_name  blog.zshipu.com;

        ssl_certificate      /etc/letsencrypt/live/zshipu.com/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/zshipu.com/privkey.pem;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;


        error_page 404 = https://zshipu.com/404.html;
        error_page 500 502 503 504 = /50x.html;

        location / {
            #root   html;
            #alias /etc/nginx/html/blog;
            root  /etc/nginx/html/blog/blog/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /article {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/blog/article/public/;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }


        location /note {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/note/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /read {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/reading/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /zqo {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/zqo/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /tlg {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/tlg/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /media {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/media/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /txp {
            #root   html;
            #alias /etc/nginx/html/blog;
            #root  /etc/nginx/html/blog/;
            alias /etc/nginx/html/txp/public;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }


    }

    server {
       listen  80;
       server_name blog.zshipu.com;
       return 301 https://blog.zshipu.com$request_uri;
    }

    server {
        listen       443 ssl;
        server_name  xiaopu.zshipu.com;

        ssl_certificate      /etc/letsencrypt/live/zshipu.com/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/zshipu.com/privkey.pem;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers  on;


        error_page 404 = https://zshipu.com/404.html;
        error_page 500 502 503 504 = /50x.html;

        location / {
            #root   html;
            #alias /etc/nginx/html/blog;
            root  /etc/nginx/html/xiaopu;
            #index  index.html index.htm;
            #try_files $uri $uri/ /index.html;
            #proxy_pass   http://127.0.0.1:4000/;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Real-Port $remote_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
    }


    server {
       listen  80;
       server_name xiaopu.zshipu.com;
       return 301 https://xiaopu.zshipu.com$request_uri;
    }

    server {
      listen 80 default;
      server_name _;
      return 403;
   }

}