Nginx将http子域重定向到https

Question

我有一个域有3个子域：

 - example.com (main domain)
 - api.example.com
 - blog.example.com
 - support.example.com (just a cname to point to zendesk)

在我的nginx上有以下3个配置：

API

# HTTP server
server {
    listen       80;
    server_name  api.example.com;
    return 301 https://api.example.com$request_uri;
}


# HTTPS server
server {
    ssl          on;
    listen       443;
    server_name  api.example.com;

    ssl_certificate APIcert.crt;
    ssl_certificate_key APIcert.key;

    #root configuration.....
}

server {
    listen 80;
    server_name blog.example.com;

    root /var/www/blog;
    index index.php index.html index.htm;

server {
    listen 80;
    listen 443 ssl;
    server_name www.example.com;
    return 301 https://example.com$request_uri;

    location ~ \.(php|html)$ {
        deny  all;
    }
}

server {
    listen 80;
    server_name example.com;
    return 301 https://example.com$request_uri;

    location ~ \.(php|html)$ {
        deny  all;
    }
}

server {
    ssl on;
    listen 443 ssl;
    ssl_certificate  mycert.crt;
    ssl_certificate_key  mycert.key;
    server_name example.com;

    root /var/www/frontend;
    .....
}

null

Answer 1

您的web服务器安装了strict-transport-security max-age=16070400；IncludeSubDomains。

这将告诉web浏览器仅使用https请求您的域。如果希望通过不安全的http访问子域blog，则需要从http严格传输安全(HSTS)中删除includeSubdomains并使用其他浏览器（或清除您的Firefox）。

https://www.ssllabs.com/ssltest/analyze.html?d=alooga.com.br