配置 Nginx 代理和 HTTPS。演示使用的操作系统是 Ubuntu 18.04。
- 下载 Nginx 并删除 Apache2
sudo apt-get install nginx
sudo apt-get remove apache2
- 创建配置文件
cd /etc/nginx/conf.d
vim default.conf
- 使用如下所示的上下文填写文件,部分设置显示被更改。然后,您可以使用 HTTPS 强制和代理来享受您的网络。
# This part is for proxy and HTTPS configure
server {
listen 443;
server_name trilium.example.net; #change trilium.example.net to your domain without HTTPS or HTTP.
ssl_certificate /etc/ssl/note/example.crt; #change /etc/ssl/note/example.crt to your path of crt file.
ssl_certificate_key /etc/ssl/note/example.net.key; #change /etc/ssl/note/example.net.key to your path of key file.
ssl on;
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
ssl_prefer_server_ciphers on;
access_log /var/log/nginx/access.log; #check the path of access.log, if it doesn't fit your file, change it
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://IP:port; #change it to your IP and port
proxy_read_timeout 90;
proxy_redirect http://IP:port https://trilium.example.net; #change them based on your IP, port and domain
}
}
# This part is for HTTPS forced
server {
listen 80;
server_name trilium.example.net; # change to your domain
return 301 https://$server_name$request_uri;
}