Nginx 配置 HTTPS 与强制跳转

申请到证书后，需在 Nginx 配置 HTTPS 站点，并把 HTTP 流量 301 跳转到 HTTPS。

HTTPS 站点配置

server {
listen 443 ssl;
server_name example.com;
ssl_certificate     /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
}

HTTP 强制跳转

server {
listen 80;
server_name example.com;
return 301 https://$host$request_uri;
}

生效验证

sudo nginx -t && sudo systemctl reload nginx

浏览器访问 http 应自动跳转 https。

常见问题

提示证书不受信任？证书链不完整，请用 fullchain.pem。资源被拦截？页面混用了 http:// 链接，改为 https。