| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667 |
- upstream chuji_server_admin {
- server 137.220.142.147:9503;
- }
- upstream cj_ws_admin {
- server 137.220.142.147:9601;
- }
- server {
- listen 80;
- client_max_body_size 5M;
- # 如果要开启443,请先生成你的服务器证书,若双向认证,请导入证书到你的电脑里
- listen 443 ssl;
- ssl_certificate /etc/nginx/ssl/cj163.xyz/fullchain.cer;
- ssl_certificate_key /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
- ssl_verify_client off;
- ssl_prefer_server_ciphers on;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers HIGH:!aNULL:!MD5;
- server_name mg379s.cj163.xyz;
- access_log /var/log/nginx/mg379s.cj163.xyz.access.log;
- error_log /var/log/nginx/mg379s.cj163.xyz.error.log;
- # 跨域
- set $cors_credentials '';
- set $cors_content_type '';
- set $cors_content_length '';
- if ($http_origin ~ '.+') {
- set $cors_credentials 'true';
- }
- if ($request_method = OPTIONS) {
- set $cors_content_type 'text/plain';
- set $cors_content_length '0';
- }
- add_header Access-Control-Allow-Origin $http_origin always;
- add_header Access-Control-Allow-Credentials $cors_credentials always;
- add_header Access-Control-Allow-Methods $http_access_control_request_method always;
- add_header Access-Control-Allow-Headers $http_access_control_request_headers always;
- add_header Content-Type $cors_content_type;
- add_header Content-Length $cors_content_length;
- if ($request_method = OPTIONS) {
- return 204;
- }
- location /ws {
- proxy_pass http://cj_ws_admin;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header Host $host;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- rewrite /ws/(.*) /$1 break;
- proxy_redirect off;
- }
- location / {
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header REMOTE_ADD $remote_addr;
- proxy_set_header Upgrade $http_upgrade;
- proxy_pass http://chuji_server_admin; #后端api容器地址
- proxy_redirect off;
- }
- }
|