| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647 |
- upstream cj_server_android {
- server 172.16.0.44:9503;
- }
- upstream cj_ws_android {
- server 172.16.0.44:9601;
- }
- server {
- listen 80;
- client_max_body_size 5M;
- # 如果要开启443,请先生成你的服务器证书,若双向认证,请导入证书到你的电脑里
- listen 443 ssl;
- ssl_certificate /etc/nginx/ssl/cj163.xyz/fullchain.cer;
- ssl_certificate_key /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
- ssl_verify_client off;
- ssl_prefer_server_ciphers on;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers HIGH:!aNULL:!MD5;
- server_name ali1-api.cj163.xyz;
- access_log /var/log/nginx/ali1-api.cj163.xyz.access.log;
- error_log /var/log/nginx/ali1-api.cj163.xyz.error.log;
- location /ws {
- proxy_pass http://cj_ws_android;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header Host $host;
- proxy_set_header X-Forwarded-For $remote_addr;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- rewrite /ws/(.*) /$1 break;
- proxy_redirect off;
- }
- location / {
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $remote_addr;
- proxy_set_header REMOTE_ADD $remote_addr;
- proxy_set_header Upgrade $http_upgrade;
- proxy_pass http://cj_server_android; #后端api容器地址
- proxy_redirect off;
- }
- }
|