Cloudflare无疑是全球CDN加速较为可靠的方案。使用Cloudflare后,那WordPress配置HTTPS应该怎么配置呢?
Cloudflare设置
概述:在Cloudflare的“SSL/TLS概述”中需要设置“完全 - 端到端加密,使用服务器上的自签名证书”模式。
客户端证书:在“SSL/TLS客户端证书”需要创建客户端证书。创建后需要保存“.pem
”、“.key
”两个文件,需要配置到ngnx。
边缘证书:在“SSL/TLS边缘证书”的“自动 HTTPS 重写”需要开启,否则后台编辑器、CSS样式等资源会由于跨域问题无法访问。
配置nginx虚拟主机
server { listen 80; server_name wpmore.cn; index index.php index.html; root /var/www/html/wpmore.cn; #charset koi8-r; access_log /var/log/nginx/wpmore.cn.access.log main; location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } location / { try_files $uri $uri/ /index.php?$args; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # location ~ \.php$ { fastcgi_pass php-fpm; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # location ~ /\.ht { deny all; } } # HTTPS server # server { listen 443 ssl; server_name wpmore.cn; index index.php index.html; root /var/www/html/wpmore.cn; ssl_certificate /etc/nginx/ssl/wpmore.cn.pem; ssl_certificate_key /etc/nginx/ssl/wpmore.cn.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { try_files $uri $uri/ /index.php?$args; } location ~ \.php$ { fastcgi_pass php-fpm; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } }
配置好nginx后,reload或者restart nginx。
安装WordPress
访问你的WordPress应用程序网址,继续安装即可。