proxy_chuji_server_admin.conf 2.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. upstream chuji_server_admin {
  2. server 137.220.142.147:9503;
  3. }
  4. upstream cj_ws_admin {
  5. server 137.220.142.147:9601;
  6. }
  7. server {
  8. listen 80;
  9. client_max_body_size 5M;
  10. # 如果要开启443,请先生成你的服务器证书,若双向认证,请导入证书到你的电脑里
  11. listen 443 ssl;
  12. ssl_certificate /etc/nginx/ssl/cj163.xyz/fullchain.cer;
  13. ssl_certificate_key /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
  14. ssl_verify_client off;
  15. ssl_prefer_server_ciphers on;
  16. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  17. ssl_ciphers HIGH:!aNULL:!MD5;
  18. server_name mg379s.cj163.xyz;
  19. access_log /var/log/nginx/mg379s.cj163.xyz.access.log;
  20. error_log /var/log/nginx/mg379s.cj163.xyz.error.log;
  21. # 跨域
  22. set $cors_credentials '';
  23. set $cors_content_type '';
  24. set $cors_content_length '';
  25. if ($http_origin ~ '.+') {
  26. set $cors_credentials 'true';
  27. }
  28. if ($request_method = OPTIONS) {
  29. set $cors_content_type 'text/plain';
  30. set $cors_content_length '0';
  31. }
  32. add_header Access-Control-Allow-Origin $http_origin always;
  33. add_header Access-Control-Allow-Credentials $cors_credentials always;
  34. add_header Access-Control-Allow-Methods $http_access_control_request_method always;
  35. add_header Access-Control-Allow-Headers $http_access_control_request_headers always;
  36. add_header Content-Type $cors_content_type;
  37. add_header Content-Length $cors_content_length;
  38. if ($request_method = OPTIONS) {
  39. return 204;
  40. }
  41. location /ws {
  42. proxy_pass http://cj_ws_admin;
  43. proxy_set_header X-Real-IP $remote_addr;
  44. proxy_set_header Host $host;
  45. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  46. proxy_http_version 1.1;
  47. proxy_set_header Upgrade $http_upgrade;
  48. proxy_set_header Connection "upgrade";
  49. rewrite /ws/(.*) /$1 break;
  50. proxy_redirect off;
  51. }
  52. location / {
  53. proxy_set_header Host $host;
  54. proxy_set_header X-Real-IP $remote_addr;
  55. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  56. proxy_set_header REMOTE_ADD $remote_addr;
  57. proxy_set_header Upgrade $http_upgrade;
  58. proxy_pass http://chuji_server_admin; #后端api容器地址
  59. proxy_redirect off;
  60. }
  61. }