如何解决Nginx HTTPS配置访问失败问题？

Question

配置HTTP成功，并且所有网页皆可访问。唯独HTTPS失败，我的nginx配置文件如下

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
    worker_connections 768;
    # multi_accept on;
}

http {

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;

    
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    server{
        listen 443 ssl;
        server_name www.xiaoyangst.top;
        ssl_certificate /home/xyst/XrtcDemo/server/cert/www.xiaoyangst.top_cert_chain.pem;
        ssl_certificate_key /home/xyst/XrtcDemo/server/cert/www.xiaoyangst.top_key.key;

        location / {
            proxy_pass https://www.xiaoyangst.top:8443;
        }
    
    }

    server {
        
        listen 80;
        server_name www.xiaoyangst.top;
        root /home/xyst/XrtcDemo/myapp/build;
        index index.html;
        location / {
            try_files $uri %uri/ /index.html;
        }
        
        location /api {
                    proxy_pass http://www.xiaoyangst.top:8888;
                    proxy_set_header Host $host;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header X-Forwarded-Proto $scheme;
            }
         return 301 https://$server_name$request_uri;
    }    


    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;


    gzip on;

    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

访问情况

通过 openssl s_client -connect www.xiaoyangst.top:443 命令确保SSL和证书没有问题

后端Node.js服务正常启动，且通过PostMan工具测试后端没有问题。所以问题应该在nginx这边

我怀疑是没有把资源给到HTTPS，所以我把HTTP去掉，直接给到HTTPS

    server{
        listen 443 ssl;
        server_name www.xiaoyangst.top;
        ssl_certificate /home/xyst/XrtcDemo/server/cert/www.xiaoyangst.top_cert_chain.pem;
        ssl_certificate_key /home/xyst/XrtcDemo/server/cert/www.xiaoyangst.top_key.key;

        server_name www.xiaoyangst.top;
                root /home/xyst/XrtcDemo/myapp/build;
                index index.html;
                location / {
                        try_files $uri %uri/ /index.html;
                }

                location /api {
                         proxy_pass https://www.xiaoyangst.top:8443;
                         proxy_set_header Host $host;
                         proxy_set_header X-Real-IP $remote_addr;
                         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                         proxy_set_header X-Forwarded-Proto $scheme;
                 }

    
    }

问题得到解决，但是我想说如何既可以配置HTTP，还可以配置HTTPS呢？

就是访问HTTP可以成功，访问HTTPS也可以成功，难道只能选择再Copy一份吗？（因为不很熟悉nginx）

Answer 1

你需要调整三处

• 第一，Nginx这层作为代理，它配置了证书等，然后转发请求给本地Web程序。 本地Web程序只需启动一个http的服务即可，即本例中只要保留 8888端口那个服务即可，让80和443端口访问Nginx后都转发给这个8888。
• 第二，Nginx配置中，ssl一段，将 proxy_pass https://www.xiaoyangst.top:8443; 改为 proxy_pass http://localhost:8888;

• 第三，调整80端口的Nginx配置，改为（只要三行）

  server {
        listen 80;
        server_name www.xiaoyangst.top;
        return 301 https://$host$request_uri;
  }