1
# ==================== Download - HTTP ====================
2
server {
3
    listen 80;
4
    server_name <your-domain>;
5

6
    # HTTP自动跳转HTTPS
7
    return 301 https://$host$request_uri;
8
}
9

10
# ==================== Download - HTTPS ====================
11
server {
12
    listen 443 ssl http2;
13
    server_name d<your-domain>;
14

15
    ssl_certificate /etc/letsencrypt/live/<your-domain>/fullchain.pem;
16
    ssl_certificate_key /etc/letsencrypt/live/<your-domain>/privkey.pem;
17
    ssl_protocols TLSv1.2 TLSv1.3;
18
    ssl_ciphers HIGH:!aNULL:!MD5;
19

20
    root /var/www/downloads;
21
    client_max_body_size 500m;
22
    charset utf-8;
23
    add_header Cache-Control "no-cache, no-store, must-revalidate";
24

25
    # 目录浏览（非必须）
26
    #location / {
27
    #    autoindex on;
28
    #    autoindex_exact_size off;
29
    #    autoindex_localtime on;
30
    #}
31

32
    # 大文件强制下载
33
    location ~* \.(exe|msi|zip|tar|gz|rar|7z|dmg|iso|deb|rpm|apk|jar)$ {
34
        add_header Content-Disposition "attachment";
35
        add_header Cache-Control "no-cache, no-store, must-revalidate";
36
    }
37

38
    sendfile on;
39
    tcp_nopush on;
40
    # 禁止访问隐藏文件
41
    location ~ /\. { deny all; }
42
}