Nginx+tomcat 配置https访问

upstream    outpatient {
server  10.6.66.127:8080;
}
upstream    emergency {
server  10.6.66.129:8080;
}
server {
listen       80;
server_name  www.xxx.com;
return	  301 https://$server_name$request_uri; 
}#访问www.xxx.com时会强制跳转到https进行访问

server {
listen       443 ssl;
server_name  www.xxx.com; #ip或者域名

ssl		     on;
ssl_certificate      /home/cert-out/outserver.crt;
ssl_certificate_key  /home/cert-out/outserver_no_password.key;#有密码时重启nginx会要求输入密码

#location / {
#proxy_pass         http://outpatient; #proxy_set_header   Host             $host;
#proxy_set_header   X-Real-IP        $remote_addr;
#proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
#}

location /outpatient {
proxy_pass http://outpatient; proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header  X-Real-IP  $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 50m;
client_body_buffer_size 256k;
proxy_connect_timeout 30;
proxy_send_timeout 30;
proxy_read_timeout 60;
proxy_buffer_size 16k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
location /emergency {
proxy_pass http://emergency; proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header  X-Real-IP  $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 50m;
client_body_buffer_size 256k;
proxy_connect_timeout 30;
proxy_send_timeout 30;
proxy_read_timeout 60;
proxy_buffer_size 16k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
location /outpatient/websocket {#websocket配置  前台需要用wss访问
proxy_pass http://outpatient/outpatient/websocket; 
proxy_redirect    off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_read_timeout 3600;

proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}

}

<!--server.xml-->
<Connector port="8080" protocol="HTTP/1.1"
maxThreads="1000"
minProcessors="100"
maxProcessors="1000"
minSpareThreads="100"
maxSpareThreads="1000"
enableLookups="false"
URIEncoding="utf-8"
acceptCount="1000"
connectionTimeout="20000"
disableUploadTimeout="ture"
redirectPort="443"
proxyPort="443" /><!--不要加proxyPort="443" 有时访问80端口时会强制跳转到443端口 不知道为什么-->
<!--Host标签里加-->
<Valve className="org.apache.catalina.valves.RemoteIpValve"
remoteIpHeader="x-forwarded-for"
remoteIpProxiesHeader="x-forwarded-by"
protocolHeader="x-forwarded-proto"/>