[英]Azure VM - DNS config with Nginx
因此,我一直在配置DNS:name.centralindia.cloudapp.azure.com,它可以容纳Ubuntu 16.05 LTS VM的运行。 我们希望站点在SSL证书下得到保护,因此我已经安装了“ Nginx服务器”来进行后端工作。 我已经将Nginx服务器配置为指向我们的自定义DNS,但是我正面临着有关Nginx配置的持续问题。 当我们输入https / http时,出现“错误的网关”错误或“ Nginx欢迎页面”或找不到404错误。
不知何故,在nginx服务器的帮助下,我们需要使用已安装在ssl_certificate /etc/ssl/certs/azurevm.crt中的SSL密钥指向DNS。 ssl_certificate_key /etc/ssl/private/azurevm.key; (这些是在Ubuntu中生成的自签名密钥,但我们需要使用密钥证书,该证书已生成并存储在Azure密钥库中,其名称为“ xxcert”,我无法在Ubuntu中找到它(var / lib / waagent))
我还遵循了此链接来保护Azure中的Web服务器: https : //docs.microsoft.com/zh-cn/azure/virtual-machines/windows/tutorial-secure-web-server ,但是此安装在第一次启动VM,但就我而言,我已经安装了Vm。
这是我在/ etc / nginx / sites-available / default下的默认配置(未对启用了site / default的站点进行任何更改):
默认服务器配置
server {
listen 80 default_server;
listen [::]:80 default_server;
return 301 https://$host$request_uri;
}
server {
# SSL configuration
#
listen 443 ssl default_server;
listen [::]:443 ssl default_server;
#
# Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332
#
# Read up on ssl_ciphers to ensure a secure configuration.
# See: https://bugs.debian.org/765782
#
# Self signed certs generated by the ssl-cert package
# Don't use them in a production server!
#
# include snippets/snakeoil.conf;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name name.centralindia.cloudapp.azure.com;
ssl on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
# ssl_certificate /etc/nginx/ssl/vmcert.pem;
# ssl_certificate_key /etc/nginx/ssl/vmcert.key;
ssl_certificate /etc/ssl/certs/azurevm.crt;
ssl_certificate_key /etc/ssl/private/azurevm.key;
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
try_files $uri $uri/ =404;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# Fix the “It appears that your reverse proxy set up is broken" error.
proxy_pass http://localhost:8000;
proxy_read_timeout 90;
proxy_redirect http://localhost:8000
http://name.centralindia.cloudapp.azure.com;} )
我认为您想将SSL证书绑定到服务器。 为此,您必须转到APP服务SSL设置。 签出-https ://docs.microsoft.com/zh-CN/azure/app-service/app-service-web-tutorial-custom-SSL
您还可以按照以下帖子操作: https : //blogs.msdn.microsoft.com/appserviceteam/2016/05/24/deploying-azure-web-app-certificate-through-key-vault/
有版本差异,但会提供一些帮助。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.