Nginx配置之:http请求转换为https

Nginx 全站https 反向代理 Tomcat 遇到静态文件.js,.css文件仍走http,出现block-all-mixed-content错误时,可使用CSP指令将http资源转换为https
关键配置为:
add_header Content-Security-Policy upgrade-insecure-requests;

完整配置:


server {
        listen 443;
        server_name demo.thatscode.com;
 
        ....
        省略ssl 相关配置
        ....
 
        location / {
 
            ....
            省略其他proxy参数
            ....
            proxy_pass http://pool_demo;
            add_header Content-Security-Policy upgrade-insecure-requests;
        }
        access_log  /www/logs/demo.thatscode.com.log;
        error_log   /www/logs/demo.thatscode.com.error;

posted @ 2019-07-27 00:22  reboot777  阅读(2528)  评论(0编辑  收藏  举报