server{
    listen 80;
    
    server_name ${DOMAIN_NAME};
    
    #（第一种）把http的域名请求转成https
    #return 301 https://$host$request_uri;
    
    #（第二种）强制将http的URL重写成https
    rewrite ^(.*) https://$server_name$1 permanent;
}

server {
    listen       443 ssl;
    listen  [::]:443 ssl;

    ssl_certificate     /etc/nginx/conf.d/cert/nginx.pem; 
    ssl_certificate_key /etc/nginx/conf.d/cert/nginx.key;

    location / {
                    proxy_set_header    X-FORWARDED-FOR $remote_addr;
                    proxy_set_header    X-FORWARDED-PROTO $scheme;
                    proxy_set_header    Host   $http_host;
                    proxy_pass          http://blog:4000;
    }

    location /twikoo {
        proxy_pass http://blog-twikoo:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }

}