如何为不同的端口配置ssl

Question

我的应用程序运行在两个端口的客户端(3000(和服务器(8080(上。我可以为客户端设置ssl，但不能为服务器设置。因此，我遇到了问题，无法从https客户端向http服务器发出请求。

服务器接受路由/api/*上的api请求，并将路由上的图像提供给该/products/{id}/*

也就是说，我执行对服务器的所有请求，如host:8080/api/*或host:8080/products/{id}/{name}.jpg
配置nginx:

server {
server_name xxx www.xxx;
root /var/www/xxx;
index index.html index.htm index.php;
location / {
proxy_pass http://localhost:3000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
location ~ .php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}
location ~ /.ht {
deny all;
}
}

listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/xxx/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/xxxu/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = xxx) {
return 301 https://$host$request_uri;
} # managed by Certbot

listen 80;
server_name xxx www.xxx
return 404; # managed by Certbot

}

我试着在互联网上搜索信息并补充配置，但没有成功。

server {
server_name xxx www.xxx;
root /var/www/xxx;
index index.html index.htm index.php;
listen 8080 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/xxx/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/xxxu/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

对不起，我不是这方面的专家，我请求你的帮助。

Answer 1

我通过添加从localhost:8080/api到domain/api的代理和从localhost:8808/products 添加domain/products来解决问题