ssl - Nginx 使用 http 但不使用 https。返回 ERR_CONNECTION_TIMED_OUT

Question

我正在使用 certbot 为我的网站创建 SSL，并使用 Nginx 进行服务。然而，即使我在 nginx conf 中更改服务器 block 并重新启动它，只有原始的 http 工作但 https 将返回 ERR_CONNECTION_TIMED_OUT。

我在互联网上尝试了很多方法，包括将服务器 block 一分为二，调整 listen 443 设置，添加 server_name...但所有方法似乎都不起作用，使用带 https 的 url 将返回 ERR_CONNECTION_TIMED_OUT。

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    listen 443 ssl;
    listen [::]:443 ssl ipv6only=on;
    ssl_certificate     /etc/letsencrypt/live/myasshole.club/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/myasshole.club/privkey.pem;

    #
    # Note: You should disable gzip for SSL traffic.
    # See: https://bugs.debian.org/773332
    #
    # Read up on ssl_ciphers to ensure a secure configuration.
    # See: https://bugs.debian.org/765782
    #
    # Self signed certs generated by the ssl-cert package
    # Don't use them in a production server!
    #
    # include snippets/snakeoil.conf;

    root /var/www/html;

    # Add index.php to the list if you are using PHP
    index index.html index.htm index.nginx-debian.html;

    server_name www.example.com;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            proxy_pass http://localhost:3000;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
    }

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #       include snippets/fastcgi-php.conf;
    #
    #       # With php7.0-cgi alone:
    #       fastcgi_pass 127.0.0.1:9000;
    #       # With php7.0-fpm:
    #       fastcgi_pass unix:/run/php/php7.0-fpm.sock;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #       deny all;
    #}

有没有想在nginx中启用https？我确定 pem key 有效，我认为问题出在我的 conf 设置上......

Answer 1

试试这个

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    listen 443 ssl;
    listen [::]:443 ssl;
    ssl on;
    ssl_certificate     /etc/letsencrypt/live/myasshole.club/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/myasshole.club/privkey.pem;

    #
    # Note: You should disable gzip for SSL traffic.
    # See: https://bugs.debian.org/773332
    #
    # Read up on ssl_ciphers to ensure a secure configuration.
    # See: https://bugs.debian.org/765782
    #
    # Self signed certs generated by the ssl-cert package
    # Don't use them in a production server!
    #
    # include snippets/snakeoil.conf;

    root /var/www/html;

    # Add index.php to the list if you are using PHP
    index index.html index.htm index.nginx-debian.html;

    server_name www.example.com;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            proxy_pass http://localhost:3000;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
    }

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #       include snippets/fastcgi-php.conf;
    #
    #       # With php7.0-cgi alone:
    #       fastcgi_pass 127.0.0.1:9000;
    #       # With php7.0-fpm:
    #       fastcgi_pass unix:/run/php/php7.0-fpm.sock;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #       deny all;
    #}

}

另请注意，最好在此处添加您的域server_name www.example.com example.com;然后重启nginxsudo service nginx restart