Implementation of Nginx domain name forwarding https access

<Connector 
   port="443" 
   protocol="org.apache.coyote.http11.Http11NioProtocol" 
   SSLEnabled="true" 
   scheme="https" 
   secure="true" 
   keystoreFile="conf\ssl\produced certificate name I use a relative path.jks" 
   keystoreType="JKS" 
   keystorePass="Password corresponding to the certificate" 
   clientAuth="false" 
   sslProtocol="TLSv1+TLSv1.1+TLSv1.2"
   maxThreads="150" ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256">
</Connector>

<!-- Define an AJP 1.3 Connector on port 8009 -->
<Connector port="8209" protocol="AJP/1.3" redirectPort="8443" secretRequired="" useBodyEncodingForURI="true" URIEncoding="UTF-8"/>

<Engine defaultHost="My domain name" name="Catalina" jvmRoute="tomcat1" URIEncoding="UTF-8">
 <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
 <Realm className="org.apache.catalina.realm.LockOutRealm">
  <Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"/>
 </Realm>
 <Host name="My domain name" appBase="webapps" unpackWARs="true" autoDeploy="true">
  <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
    prefix="localhost_access_log" suffix=".txt"
    pattern="%h %l %u %t &quot;%r&quot; %s %b" />
 </Host>
</Engine>

server {
 listen 443 ssl; #Listening port, Nginx1.5 and later recommends using server_name pangsir01.domain.com; #Request domain name ssl_certificate ssl/certificate name A.crt; #crt certificate path, storage location Nginx's conf/ssl folder, you can use the absolute path ssl_certificate_key ssl/certificate name A.key; #crt certificate key path ssl_session_timeout 5m; #Session timeout ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #Encryption algorithm ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #SSL protocol #Intercept all requests location / {
  proxy_http_version 1.1; #http protocol used by the proxy proxy_set_header Host $host; #header adds request host information proxy_set_header X-Real-IP $remote_addr; #header adds request source IP information proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add proxy record proxy_pass http://127.0.0.1:8001; #Service A access address}
}

server {
 listen 443 ssl; #Listening port, Nginx1.5 and later recommends using server_name pangsir02.domain.com; #Request domain name ssl_certificate ssl/certificate name B.crt; #crt certificate path, storage location Nginx's conf/ssl folder, you can use the absolute path ssl_certificate_key ssl/certificate name B.key; #crt certificate key path ssl_session_timeout 5m; #Session timeout ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #Encryption algorithm ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #SSL protocol #Intercept all requests location / {
  proxy_http_version 1.1; #http protocol used by the proxy proxy_set_header Host $host; #header adds request host information proxy_set_header X-Real-IP $remote_addr; #header adds request source IP information proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add proxy record proxy_pass http://127.0.0.1:8002; #Service B access address}
}

server {
 listen 443 ssl; #Listening port, Nginx1.5 and later recommends using server_name pangsir03.domain.com; #Request domain name ssl_certificate ssl/certificate name C.crt; #crt certificate path, storage location Nginx's conf/ssl folder, you can use the absolute path ssl_certificate_key ssl/certificate name C.key; #crt certificate key path ssl_session_timeout 5m; #Session timeout ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #Encryption algorithm ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #SSL protocol #Intercept all requests location / {
  proxy_http_version 1.1; #http protocol used by the proxy proxy_set_header Host $host; #header adds request host information proxy_set_header X-Real-IP $remote_addr; #header adds request source IP information proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add proxy record proxy_pass http://127.0.0.1:8003; #Service B access address}
}

server {
 listen 80; #Listening port server_name a.domain.com b.domain.com c.domain.com; #Request domain name return 301 https://$host$request_uri; #Redirect to https access.
}

server {
  listen 443 ssl; #Listening port server_name pangsir01.domain.com; #Request domain name ssl_certificate ssl/certificate name A.crt; #crt certificate path ssl_certificate_key ssl/certificate name A.key; #crt certificate key path ssl_session_timeout 5m; #Session timeout ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #Encryption algorithm ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #SSL protocol #Intercept all requests location / {
   proxy_http_version 1.1; #http protocol used by the proxy proxy_set_header Host $host; #header adds request host information proxy_set_header X-Real-IP $remote_addr; #header adds request source IP information proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Add proxy record proxy_pass http://127.0.0.1:8001; #Service A access address}
  
  #Intercept websocket request location /websocket {
   proxy_pass http://127.0.0.1:8001;
   proxy_http_version 1.1;
   proxy_set_header Upgrade $http_upgrade;
   proxy_set_header Connection "upgrade";
  }
 }