☀️

Hi Folks.

    --- title: 腾讯云域名设置 author: chunxiao create_time: 2026-03-01 21:08:55 update_time: 2026-03-01 21:09:30 tags: nginx ---

    一、域名备案

    国内服务器绑定域名都需要备案。

    二、设置子域名

    对于多个服务建议使用子域名区分。可以配置泛域名 *.huxu.ltd。 但是泛域名需要使用付费的SSL解析证书。

    三、SSL解析

    申请免费的SSL证书，每个子域名提交一个申请。

    四、设置 nginx

  1. 下载 SSL 证书，仅需要 key 和 crt 文件。
  2. 文件配置，放于目录conf.d，命名 huxu.conf，如下： 
    
server {
    listen 80;
    server_name huxu.ltd *.huxu.ltd;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name huxu.ltd;

    sslcertificate /etc/nginx/ssl/huxu.ltdbundle.crt;
    sslcertificatekey /etc/nginx/ssl/huxu.ltd.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    sslsessiontimeout 10m;
    sslsessioncache shared:SSL:10m;

    root /usr/share/nginx/html;
    index index.html;

    location / {
        try_files $uri $uri/ =404;
    }
}

server {
    listen 443 ssl;
    server_name blog.huxu.ltd www.blog.huxu.ltd;

    sslcertificate /etc/nginx/ssl/blog.huxu.ltdbundle.crt;
    sslcertificatekey /etc/nginx/ssl/blog.huxu.ltd.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    sslsessiontimeout 10m;
    sslsessioncache shared:SSL:10m;

    root /usr/share/nginx/html;
    index index.html;

    location / {
        try_files $uri $uri/ =404;
    }
}

server {
    listen 443 ssl;
    server_name code.huxu.ltd www.code.huxu.ltd;

    sslcertificate /etc/nginx/ssl/code.huxu.ltdbundle.crt;
    sslcertificatekey /etc/nginx/ssl/code.huxu.ltd.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    sslsessiontimeout 10m;
    sslsessioncache shared:SSL:10m;

    location / {
        proxy_pass http://175.27.138.11:8081;
        proxysetheader Host $host;
        proxysetheader X-Real-IP $remote_addr;
        proxysetheader X-Forwarded-For $proxyaddxforwardedfor;
        proxysetheader X-Forwarded-Proto $scheme;

		# WebSocket
        proxyhttpversion 1.1;
        proxysetheader Upgrade $http_upgrade;
        proxysetheader Connection "upgrade";
    }
}

server {
    listen 443 ssl;
    server_name game.huxu.ltd www.game.huxu.ltd;

    sslcertificate /etc/nginx/ssl/game.huxu.ltdbundle.crt;
    sslcertificatekey /etc/nginx/ssl/game.huxu.ltd.key;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    sslsessiontimeout 10m;
    sslsessioncache shared:SSL:10m;

    location / {
        proxy_pass http://175.27.138.11:8082;
        proxysetheader Host $host;
        proxysetheader X-Real-IP $remote_addr;
        proxysetheader X-Forwarded-For $proxyaddxforwardedfor;
        proxysetheader X-Forwarded-Proto $scheme;
    }
}
`
  3. docker 启动 nginx： 
    
docker run --name nginx \\
  -p 80:80 \\
  -p 443:443 \\
  -v /home/chunxiao/html:/usr/share/nginx/html \\
  -v /home/chunxiao/docker/nginx/conf.d:/etc/nginx/conf.d \\
  -v /home/chunxiao/docker/nginx/ssl:/etc/nginx/ssl \\
  --restart=always \\
  -d nginx
`
  4. 其他命令： 
    
docker exec -it nginx /bin/bash
docker exec -it nginx nginx -s reload # 热更新