proxy_chuji_ws_server.conf 1.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. upstream cj_http_server {
  2. server 172.16.0.44:9503;
  3. }
  4. upstream cj_ws_server {
  5. server 172.16.0.44:9601;
  6. }
  7. server {
  8. listen 80;
  9. client_max_body_size 5M;
  10. # 如果要开启443,请先生成你的服务器证书,若双向认证,请导入证书到你的电脑里
  11. listen 443 ssl;
  12. ssl_certificate /etc/nginx/ssl/cj163.xyz/fullchain.cer;
  13. ssl_certificate_key /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
  14. ssl_verify_client off;
  15. ssl_prefer_server_ciphers on;
  16. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  17. ssl_ciphers HIGH:!aNULL:!MD5;
  18. server_name ws1x.cj163.xyz;
  19. access_log /var/log/nginx/ws1x.cj163.xyz.access.log;
  20. error_log /var/log/nginx/ws1x.cj163.xyz.error.log;
  21. location /ws {
  22. proxy_pass http://cj_ws_server;
  23. proxy_set_header X-Real-IP $remote_addr;
  24. proxy_set_header Host $host;
  25. proxy_set_header X-Forwarded-For $remote_addr;
  26. proxy_http_version 1.1;
  27. proxy_set_header Upgrade $http_upgrade;
  28. proxy_set_header Connection "upgrade";
  29. rewrite /ws/(.*) /$1 break;
  30. proxy_redirect off;
  31. }
  32. location / {
  33. proxy_set_header Host $host;
  34. proxy_set_header X-Real-IP $remote_addr;
  35. proxy_set_header X-Forwarded-For $remote_addr;
  36. proxy_set_header REMOTE_ADD $remote_addr;
  37. proxy_set_header Upgrade $http_upgrade;
  38. proxy_pass http://cj_http_server; #后端api容器地址
  39. proxy_redirect off;
  40. }
  41. }