nginx默认http跳转到https

添加别名kexin

upstream kexin {
  ip_hash;
  server  192.168.0.77:8081;
  #server  192.168.0.77:8081;
}

https与重定向（刷新页面配置）

server {
    listen 443 ssl; 
    #server_name  appsign.caict.ac.cn;  
    server_name  192.168.0.77;
    client_max_body_size    1000m;
    ssl_certificate        /ssl/server.crt;
    ssl_certificate_key    /ssl/server.key;
    ssl_session_timeout  30m;
    ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    resolver 127.0.0.11;
    #让http请求重定向到https请求   
    error_page 497  https://$host:443$uri?$args;  

    location /app/ {
        default_type "text/html";
        proxy_set_header Host $host:$server_port;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
	#下边是为获取真实IP所做的设置
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://kexin/;
	proxy_redirect default;
    }
    
    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
        try_files $uri $uri/ @rewrites;
    }

    location @rewrites {
        proxy_cookie_path / /;
        proxy_set_header Cookie $http_cookie;
        rewrite ^.*$ /index.html last;
    }

}

http转发配置 （将http请求转发到https）

server {
 listen 80;#监听端口
 #server_name appsign.caict.ac.cn;#请求域名
 server_name  192.168.0.77;
 rewrite ^(.*)$ https://$host$1 permanent;
}

完整文件如下（Docker版）：

map $http_upgrade $connection_upgrade { 
    default          keep-alive;
    'websocket'      upgrade;
}

upstream kexin {
  ip_hash;
  server  192.168.0.77:8081;
  #server  192.168.0.77:8081;
}


underscores_in_headers on;

server {
    listen 443 ssl; 
    #server_name  appsign.caict.ac.cn;  
    server_name  192.168.0.77;
    client_max_body_size    1000m;
    ssl_certificate        /ssl/server.crt;
    ssl_certificate_key    /ssl/server.key;
    ssl_session_timeout  30m;
    ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    resolver 127.0.0.11;
    #让http请求重定向到https请求   
    error_page 497  https://$host:443$uri?$args;  

    location /app/ {
        default_type "text/html";
        proxy_set_header Host $host:$server_port;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
	#下边是为获取真实IP所做的设置
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://kexin/;
	proxy_redirect default;
    }
    
    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
        try_files $uri $uri/ @rewrites;
    }

    location @rewrites {
        proxy_cookie_path / /;
        proxy_set_header Cookie $http_cookie;
        rewrite ^.*$ /index.html last;
    }


}
server {
 listen 80;#监听端口
 #server_name appsign.caict.ac.cn;#请求域名
 server_name  192.168.0.77;
 rewrite ^(.*)$ https://$host$1 permanent;
}