nginx配置主域名跳转www域名并支持ssl

最新推荐文章于 2026-06-19 16:51:43 发布

原创最新推荐文章于 2026-06-19 16:51:43 发布 · 4.6w 阅读

1 ·

本内容遵循CC 4.0 BY-SA版权协议

linux 同时被 2 个专栏收录

140 篇文章

订阅专栏

nginx

83 篇文章

订阅专栏

本文详细介绍了如何使用Nginx配置HTTPS重定向，包括从HTTP到HTTPS的强制跳转，以及对于非www和www域名的支持。同时，还提供了移动端和其他二级域名的配置示例，确保所有访问都通过安全的HTTPS进行。

server {
		listen		80;
		listen		443 ssl;
		server_name	xxxx.com;
	 	return		301	https://www.xxx.com$request_uri;
	}
	server {
		listen		80;
		server_name	www.xxx.com;
	 	return		301	https://$host$request_uri;
	}
	server {
		listen	        443	ssl default_server; #注意default_server须加
		server_name	www.xxxx.com;
		#其他配置
	}

需要注意的是非www主域名必须要有证书支持，如果上面不行，使用下面的：

    server {
       listen 443 ssl;
       ssl_certificate /etc/letsencrypt/live/xxxx/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/xxx/privkey.pem;
       server_name xxx.com;
       return 301 https://www.xxx.com$request_uri;
    }

    server {
         listen 80;
         server_name xxx.com www.xxx.com;
         return 301 https://https://www.xxx.com$request_uri;
    }

     server {
        listen 443 ssl default_server;
        ssl_certificate /etc/letsencrypt/live/xxx/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/xxx/privkey.pem;
        server_name www.xxx.com;
        .............. #正常使用的server段
    }

如果有移动端或其他二级域名则如下：

    server {
       listen 80;
       listen 443 ssl;
       ssl_certificate /etc/letsencrypt/live/xxxx/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/xxx/privkey.pem;
       server_name xxx.com;
       return 301 https://www.xxx.com$request_uri;
    }

    server {
         listen 80;
         server_name *.xxx.com;
         return 301 https://$host$request_uri;
    }

     server {
        listen 443 ssl default_server;
        ssl_certificate /etc/letsencrypt/live/xxx/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/xxx/privkey.pem;
        server_name www.xxx.com m.xxx.com;
        .............. #正常使用的server段
    }