user www www;

worker_processes auto;

error_log /www/wwwlogs/nginx_error.log crit;

pid    /www/server/nginx/logs/nginx.pid;

worker_rlimit_nofile 51200;



stream {

  log_format tcp_format '$time_local|$remote_addr|$protocol|$status|$bytes_sent|$bytes_received|$session_time|$upstream_addr|$upstream_bytes_sent|$upstream_bytes_received|$upstream_connect_time';

  

  access_log /www/wwwlogs/tcp-access.log tcp_format;

  error_log /www/wwwlogs/tcp-error.log;

  include /www/server/panel/vhost/nginx/tcp/*.conf;

}



events

  {

    use epoll;

    worker_connections 51200;

    multi_accept on;

  }



http

  {

    include    mime.types;

		#include luawaf.conf;



		include proxy.conf;



    default_type application/octet-stream;



    server_names_hash_bucket_size 512;

    client_header_buffer_size 32k;

    large_client_header_buffers 4 32k;

    client_max_body_size 50m;



    sendfile  on;

    tcp_nopush on;



    keepalive_timeout 60;



    tcp_nodelay on;



    fastcgi_connect_timeout 300;

    fastcgi_send_timeout 300;

    fastcgi_read_timeout 300;

    fastcgi_buffer_size 64k;

    fastcgi_buffers 4 64k;

    fastcgi_busy_buffers_size 128k;

    fastcgi_temp_file_write_size 256k;

		fastcgi_intercept_errors on;



    gzip on;

    gzip_min_length 1k;

    gzip_buffers   4 16k;

    gzip_http_version 1.1;

    gzip_comp_level 2;

    gzip_types   text/plain application/javascript application/x-javascript text/javascript text/css application/xml;

    gzip_vary on;

    gzip_proxied  expired no-cache no-store private auth;

    gzip_disable  "MSIE [1-6]\.";



    limit_conn_zone $binary_remote_addr zone=perip:10m;

		limit_conn_zone $server_name zone=perserver:10m;



    server_tokens off;

    access_log off;



server

  {

    listen 888;

    server_name phpmyadmin;

    index index.html index.htm index.php;

    root /www/server/phpmyadmin;



    #error_page  404  /404.html;

    include enable-php.conf;



    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

      expires   30d;

    }



    location ~ .*\.(js|css)?$

    {

      expires   12h;

    }



    location ~ /\.

    {

      deny all;

    }



    access_log /www/wwwlogs/access.log;

  }

server {  

  listen 80;

  server_name www.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



# server {

#   listen 443;

#   server_name www.carduniverse.top;

#   ssl on;

#   ssl_certificate cert/server.crt;

#   ssl_certificate_key cert/server.key;

#   ssl_session_timeout 5m;

#   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

#   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

#   ssl_prefer_server_ciphers on;

   

   

   

#   location ~ .+\.unityweb$ {

#    add_header Content-Encoding: br;

#    root /www/wwwroot/default/webgl; #站点目录

#    index index.html index.htm;

#   } 

# }



server {

# Add the following config within http server configuration

# ...

  listen 443;

  server_name www.carduniverse.top;

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;

   

  # root /www/wwwroot/default/webgl; #站点目录

  # index index.html;

   

    location ~ .+\.unityweb$ {

   add_header Content-Encoding: br;

   root /www/wwwroot/default/webgl; #站点目录

   index index.html index.htm;

  } 

   

# On-disk Brotli-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.br$ {

    # Because this file is already pre-compressed on disk, disable the on-demand compression on it.

    # Otherwise nginx would attempt double compression.

    gzip off;

    add_header Content-Encoding br;

    default_type application/octet-stream;

  }



  # On-disk Brotli-precompressed JavaScript code files:

  location ~ .+\.js\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    default_type application/javascript;

  }



  # On-disk Brotli-precompressed WebAssembly files:

  location ~ .+\.wasm\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }



  # On-disk gzip-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    default_type application/gzip;

  }



  # On-disk gzip-precompressed JavaScript code files:

  location ~ .+\.js\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip; # The correct MIME type here would be application/octet-stream, but due to Safari bug https://bugs.webkit.org/show_bug.cgi?id=247421, it's preferable to use MIME Type application/gzip instead.

    default_type application/javascript;

  }



  # On-disk gzip-precompressed WebAssembly files:

  location ~ .+\.wasm\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }

}



server {  

  listen 80;

  server_name cms.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



server {

  # Listen HTTPS

  listen 80;

  server_name cms.carduniverse.top;



  # SSL config

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;



  





  # Proxy Config

  location / {

    proxy_pass http://127.0.0.1:1337;

    proxy_http_version 1.1;

    proxy_set_header X-Forwarded-Host $host;

    proxy_set_header X-Forwarded-Server $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_set_header Host $http_host;

    proxy_set_header Upgrade $http_upgrade;

    proxy_set_header Connection "Upgrade";

    proxy_pass_request_headers on;

  }

}



   

include /www/server/panel/vhost/nginx/*.conf;

}

user www www;

worker_processes auto;

error_log /www/wwwlogs/nginx_error.log crit;

pid    /www/server/nginx/logs/nginx.pid;

worker_rlimit_nofile 51200;



stream {

  log_format tcp_format '$time_local|$remote_addr|$protocol|$status|$bytes_sent|$bytes_received|$session_time|$upstream_addr|$upstream_bytes_sent|$upstream_bytes_received|$upstream_connect_time';

  

  access_log /www/wwwlogs/tcp-access.log tcp_format;

  error_log /www/wwwlogs/tcp-error.log;

  include /www/server/panel/vhost/nginx/tcp/*.conf;

}



events

  {

    use epoll;

    worker_connections 51200;

    multi_accept on;

  }



http

  {

    include    mime.types;

		#include luawaf.conf;



		include proxy.conf;



    default_type application/octet-stream;



    server_names_hash_bucket_size 512;

    client_header_buffer_size 32k;

    large_client_header_buffers 4 32k;

    client_max_body_size 50m;



    sendfile  on;

    tcp_nopush on;



    keepalive_timeout 60;



    tcp_nodelay on;



    fastcgi_connect_timeout 300;

    fastcgi_send_timeout 300;

    fastcgi_read_timeout 300;

    fastcgi_buffer_size 64k;

    fastcgi_buffers 4 64k;

    fastcgi_busy_buffers_size 128k;

    fastcgi_temp_file_write_size 256k;

		fastcgi_intercept_errors on;



    gzip on;

    gzip_min_length 1k;

    gzip_buffers   4 16k;

    gzip_http_version 1.1;

    gzip_comp_level 2;

    gzip_types   text/plain application/javascript application/x-javascript text/javascript text/css application/xml;

    gzip_vary on;

    gzip_proxied  expired no-cache no-store private auth;

    gzip_disable  "MSIE [1-6]\.";



    limit_conn_zone $binary_remote_addr zone=perip:10m;

		limit_conn_zone $server_name zone=perserver:10m;



    server_tokens off;

    access_log off;



server

  {

    listen 888;

    server_name phpmyadmin;

    index index.html index.htm index.php;

    root /www/server/phpmyadmin;



    #error_page  404  /404.html;

    include enable-php.conf;



    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

      expires   30d;

    }



    location ~ .*\.(js|css)?$

    {

      expires   12h;

    }



    location ~ /\.

    {

      deny all;

    }



    access_log /www/wwwlogs/access.log;

  }

server {  

  listen 80;

  server_name www.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



# server {

#   listen 443;

#   server_name www.carduniverse.top;

#   ssl on;

#   ssl_certificate cert/server.crt;

#   ssl_certificate_key cert/server.key;

#   ssl_session_timeout 5m;

#   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

#   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

#   ssl_prefer_server_ciphers on;

   

   

   

#   location ~ .+\.unityweb$ {

#    add_header Content-Encoding: br;

#    root /www/wwwroot/default/webgl; #站点目录

#    index index.html index.htm;

#   } 

# }



server {

# Add the following config within http server configuration

# ...

  listen 443;

  server_name www.carduniverse.top;

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;

   

  # root /www/wwwroot/default/webgl; #站点目录

  # index index.html;

   

    location ~ .+\.unityweb$ {

   add_header Content-Encoding: br;

   root /www/wwwroot/default/webgl; #站点目录

   index index.html index.htm;

  } 

   

# On-disk Brotli-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.br$ {

    # Because this file is already pre-compressed on disk, disable the on-demand compression on it.

    # Otherwise nginx would attempt double compression.

    gzip off;

    add_header Content-Encoding br;

    default_type application/octet-stream;

  }



  # On-disk Brotli-precompressed JavaScript code files:

  location ~ .+\.js\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    default_type application/javascript;

  }



  # On-disk Brotli-precompressed WebAssembly files:

  location ~ .+\.wasm\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }



  # On-disk gzip-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    default_type application/gzip;

  }



  # On-disk gzip-precompressed JavaScript code files:

  location ~ .+\.js\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip; # The correct MIME type here would be application/octet-stream, but due to Safari bug https://bugs.webkit.org/show_bug.cgi?id=247421, it's preferable to use MIME Type application/gzip instead.

    default_type application/javascript;

  }



  # On-disk gzip-precompressed WebAssembly files:

  location ~ .+\.wasm\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }

}



server {  

  listen 80;

  server_name cms.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



server {

  # Listen HTTPS

  listen 80;

  server_name cms.carduniverse.top;



  # SSL config

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;



  





  # Proxy Config

  location / {

    proxy_pass http://127.0.0.1:1337;

    proxy_http_version 1.1;

    proxy_set_header X-Forwarded-Host $host;

    proxy_set_header X-Forwarded-Server $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_set_header Host $http_host;

    proxy_set_header Upgrade $http_upgrade;

    proxy_set_header Connection "Upgrade";

    proxy_pass_request_headers on;

  }

}



   

include /www/server/panel/vhost/nginx/*.conf;

}

user www www;

worker_processes auto;

error_log /www/wwwlogs/nginx_error.log crit;

pid    /www/server/nginx/logs/nginx.pid;

worker_rlimit_nofile 51200;



stream {

  log_format tcp_format '$time_local|$remote_addr|$protocol|$status|$bytes_sent|$bytes_received|$session_time|$upstream_addr|$upstream_bytes_sent|$upstream_bytes_received|$upstream_connect_time';

  

  access_log /www/wwwlogs/tcp-access.log tcp_format;

  error_log /www/wwwlogs/tcp-error.log;

  include /www/server/panel/vhost/nginx/tcp/*.conf;

}



events

  {

    use epoll;

    worker_connections 51200;

    multi_accept on;

  }



http

  {

    include    mime.types;

		#include luawaf.conf;



		include proxy.conf;



    default_type application/octet-stream;



    server_names_hash_bucket_size 512;

    client_header_buffer_size 32k;

    large_client_header_buffers 4 32k;

    client_max_body_size 50m;



    sendfile  on;

    tcp_nopush on;



    keepalive_timeout 60;



    tcp_nodelay on;



    fastcgi_connect_timeout 300;

    fastcgi_send_timeout 300;

    fastcgi_read_timeout 300;

    fastcgi_buffer_size 64k;

    fastcgi_buffers 4 64k;

    fastcgi_busy_buffers_size 128k;

    fastcgi_temp_file_write_size 256k;

		fastcgi_intercept_errors on;



    gzip on;

    gzip_min_length 1k;

    gzip_buffers   4 16k;

    gzip_http_version 1.1;

    gzip_comp_level 2;

    gzip_types   text/plain application/javascript application/x-javascript text/javascript text/css application/xml;

    gzip_vary on;

    gzip_proxied  expired no-cache no-store private auth;

    gzip_disable  "MSIE [1-6]\.";



    limit_conn_zone $binary_remote_addr zone=perip:10m;

		limit_conn_zone $server_name zone=perserver:10m;



    server_tokens off;

    access_log off;



server

  {

    listen 888;

    server_name phpmyadmin;

    index index.html index.htm index.php;

    root /www/server/phpmyadmin;



    #error_page  404  /404.html;

    include enable-php.conf;



    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

      expires   30d;

    }



    location ~ .*\.(js|css)?$

    {

      expires   12h;

    }



    location ~ /\.

    {

      deny all;

    }



    access_log /www/wwwlogs/access.log;

  }

server {  

  listen 80;

  server_name www.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



# server {

#   listen 443;

#   server_name www.carduniverse.top;

#   ssl on;

#   ssl_certificate cert/server.crt;

#   ssl_certificate_key cert/server.key;

#   ssl_session_timeout 5m;

#   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

#   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

#   ssl_prefer_server_ciphers on;

   

   

   

#   location ~ .+\.unityweb$ {

#    add_header Content-Encoding: br;

#    root /www/wwwroot/default/webgl; #站点目录

#    index index.html index.htm;

#   } 

# }



server {

# Add the following config within http server configuration

# ...

  listen 443;

  server_name www.carduniverse.top;

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;

   

  # root /www/wwwroot/default/webgl; #站点目录

  # index index.html;

   

    location ~ .+\.unityweb$ {

   add_header Content-Encoding: br;

   root /www/wwwroot/default/webgl; #站点目录

   index index.html index.htm;

  } 

   

# On-disk Brotli-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.br$ {

    # Because this file is already pre-compressed on disk, disable the on-demand compression on it.

    # Otherwise nginx would attempt double compression.

    gzip off;

    add_header Content-Encoding br;

    default_type application/octet-stream;

  }



  # On-disk Brotli-precompressed JavaScript code files:

  location ~ .+\.js\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    default_type application/javascript;

  }



  # On-disk Brotli-precompressed WebAssembly files:

  location ~ .+\.wasm\.br$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding br;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }



  # On-disk gzip-precompressed data files should be served with compression enabled:

  location ~ .+\.(data|symbols\.json)\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    default_type application/gzip;

  }



  # On-disk gzip-precompressed JavaScript code files:

  location ~ .+\.js\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip; # The correct MIME type here would be application/octet-stream, but due to Safari bug https://bugs.webkit.org/show_bug.cgi?id=247421, it's preferable to use MIME Type application/gzip instead.

    default_type application/javascript;

  }



  # On-disk gzip-precompressed WebAssembly files:

  location ~ .+\.wasm\.gz$ {

    gzip off; # Do not attempt dynamic gzip compression on an already compressed file

    add_header Content-Encoding gzip;

    # Enable streaming WebAssembly compilation by specifying the correct MIME type for

    # Wasm files.

    default_type application/wasm;

  }

}



server {  

  listen 80;

  server_name cms.carduniverse.top;

  return 301 https://$server_name$request_uri; 

}



server {

  # Listen HTTPS

  listen 80;

  server_name cms.carduniverse.top;



  # SSL config

  ssl on;

  ssl_certificate cert/server.crt;

  ssl_certificate_key cert/server.key;

  ssl_session_timeout 5m;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  ssl_prefer_server_ciphers on;



  





  # Proxy Config

  location / {

    proxy_pass http://127.0.0.1:1337;

    proxy_http_version 1.1;

    proxy_set_header X-Forwarded-Host $host;

    proxy_set_header X-Forwarded-Server $host;

    proxy_set_header X-Real-IP $remote_addr;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_set_header Host $http_host;

    proxy_set_header Upgrade $http_upgrade;

    proxy_set_header Connection "Upgrade";

    proxy_pass_request_headers on;

  }

}



   

include /www/server/panel/vhost/nginx/*.conf;

}

这个nginx配置 文件 我使用http://cms.carduniverse.top:1337 能访问后台

https://cms.carduniverse.top:1337,却无法访问，怎么解决这个问题？帮我修改下这个nginx 配置文件