免费SSL证书Let's encrypt申请流程及nginxSSL配置 wget https://dl.eff.org/certbot-autochmod a+x certbot-auto单域名./certbot-auto certonly --email youremail@example.com --agree-tos --webroot -w 网站目录 -d 域名多域名./certbot-auto certonly --email youremail@example.com --agree-tos --webroot -w 网站目录 -d 域名1 -d 域名2续期./certbot-auto certonly --renew-by-default --email youremail@example.com -d yourdomainnamenginxSSL段配置写法ssl on;ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_ciphers"EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5"; ssl_prefer_server_ciphers on;ssl_session_cache shared:SSL:10m;

Nginx HTTP301跳转写法 server { listen 80; server_name example.com; rewrite ^(.*) https://example.com$1 permanent; }

Nginx配置index of/索引页笔记 server { listen 80 default; root /usr/local/nginx/html/downloads; location / { autoindex on; autoindex_exact_size off; autoindex_localtime on; charset utf-8,gbk; } }