Nginx-lingserver 阿里云nginx配置

来自ling
跳转至： 导航， 搜索

利用群晖自带的 Nginx 做反向代理

安装

/alidata/server/nginx/sbin/nginx -s stop
rm -rf /alidata/server/nginx/logs/*.log
/alidata/server/nginx/sbin/nginx  -c /alidata/dockerdata/nginx/conf/nginx.conf
netstat -tunlp

Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.

编译安装

#http://nginx.org/en/download.html
cd /alidata/soft
wget http://nginx.org/download/nginx-1.17.4.tar.gz
tar -zxvf nginx-1.17.4.tar.gz
  1. 清空原有文件或cp备份
mv /alidata/server/nginx /alidata/server/nginx_bark

或 

rm -rf /alidata/server/nginx

yum -y install gcc gcc-c++ pcre-devel openssl openssl-devel
apt-get install libpcre3 libpcre3-dev libpcrecpp0v5 libssl-dev zlib1g-dev

cd /alidata/soft/nginx-1.17.4
./configure --prefix=/alidata/server/nginx --conf-path=/alidata/server/nginx/conf/nginx.conf --with-stream --with-http_ssl_module
make 
make install
mkdir -p /alidata/dockerdata/nginx/conf
cp /alidata/server/nginx/conf/mime.types /alidata/dockerdata/nginx/conf
  1. 查看编译结果
cd /alidata/server/nginx

yum安装没有stream模块

tee /etc/yum.repos.d/nginx.repo <<-'EOF'
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1
EOF
yum info nginx
yum install nginx
nginx -s stop
nginx  -c /alidata/dockerdata/nginx/conf/nginx.conf

nginx 张家口 all

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
user root;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
    proxy_connect_timeout      2000;
    proxy_send_timeout         2000;
    proxy_read_timeout         2000;
 
    #gzip  on;
 
    server {
        listen       80;
        listen       443 ssl;
        server_name  wiki.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://localhost:73/;
          #proxy_pass http://qunhui.ling2.cn:73/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }


    server {
        listen       80;
        listen       443 ssl;
        server_name  yueworldwiki.ling2.cn;

        charset utf-8;

        location / {
          proxy_pass http://localhost:84/;
          #proxy_pass http://qunhui.ling2.cn:73/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }


    server {
        listen       80;
        listen       443 ssl;
        server_name  sincere.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://localhost:973/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zookeeper.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:64/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nexus.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:74/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docker.ling2.cn;
        client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads
        chunked_transfer_encoding on;# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486)
 
        charset utf-8;
 
        location / {
          proxy_pass http://101.132.191.22:8889/; #server.ling2.cn流量问题和nexus.ling2.cn分开
          proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
          proxy_redirect off;
          proxy_buffering off;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m; 
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  rabbitmq.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:78/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mantis.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:69/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlab.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:70/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlabssh.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:10022/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  jenkins.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:71/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kafka.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:72/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  opencron.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:68/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kibana.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:75/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zipkin.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:63/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  oracle.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://101.132.191.22:65/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  explorer.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:62/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  sonar.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:61/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mail.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:58/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docservice.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:59/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  synology.ling2.cn web.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://qunhui.ling2.win:5000/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          #client_max_body_size    1000m;
        }
        location /photo {
          proxy_pass http://qunhui.ling2.win:5007/photo ;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          #client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  www.shshenzhen.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/laojia/;
          index  index.html index.htm;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  shshenzhen.ling2.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/laojia/;
          index  index.html index.htm;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  ivs.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://103.237.3.218:8083/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  huarui.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://101.132.191.22:80/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  iit.ling2.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/iit/;
          index  index.html index.html;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        location /base {
          proxy_pass http://47.100.28.123/base;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /iit {
          proxy_pass http://47.100.28.123/iit;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /file {
          proxy_pass http://47.100.28.123/file;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /websocket {
          proxy_pass http://47.100.28.123/websocket;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  register.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8761/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  eureka.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8761/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  config.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8888/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  base.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:4000/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  auth.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:3000/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gateway.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:9999/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  monitor.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:5001/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  tuleap.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass https://101.132.191.22:55/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nifi.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://127.0.0.1:54/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nacos.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8848/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    upstream miniocloud {
        server 127.0.0.1:9001 weight=20 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s;
    }
    proxy_cache_path /alidata/dockerdata/miniocloud/cache levels=1:2 keys_zone=miniocloud_cache:10m max_size=1g inactive=60m use_temp_path=off;
    server {
        listen       80;
        listen       443 ssl;
        server_name  miniocloud.ling2.cn;
 
        charset utf-8;
        location / {
          proxy_cache      miniocloud_cache;
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          #proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_pass http://miniocloud;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    upstream minio {
        server 127.0.0.1:9000 weight=20 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s;
    }
    proxy_cache_path /alidata/dockerdata/minio/cache levels=1:2 keys_zone=minio_cache:10m max_size=1g inactive=60m use_temp_path=off;
    server {
        listen       80;
        listen       443 ssl;
        server_name  minio.ling2.cn;
 
        charset utf-8;
        location / {
          proxy_cache      minio_cache;
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          #proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_pass http://minio;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  fgzx99.ling2.cn fgzx99.fuguo.ren;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          #proxy_pass http://101.132.191.22:99/;  
          proxy_pass http://127.0.0.1:99/;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  neo4j.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_pass http://101.132.191.22:7474/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  cloud.ling2.cn;
        add_header X-Frame-Options ALLOWALL;
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET,POST';
        add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
 
        charset utf-8;
         location ^~/api/ver2.0/zy/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/zy/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/future/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/future/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/rule/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/rule/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/admin/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/admin/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/auth/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/auth/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/file/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/file/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/pay {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/pay/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         } 
         location ^~/api/ver2.0/es/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/es/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/api/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/api/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
    location /bi {
        proxy_pass https://cafbi.changanford.cn;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_set_header   Host              $http_host;
        proxy_set_header   X-Real-IP         $remote_addr;
        client_max_body_size    100m;
        client_body_buffer_size 1024k;
    }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #alias /alidata/dockerdata/ling-cloud-ui/dist/;
           alias /alidata/dockerdata/ling-cloud-ui2/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  cloudwiki.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /alidata/dockerdata/ling-cloud-ui-react/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zy.ling2.cn;
 
        charset utf-8;
         location ^~/api/ver2.0/zy/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/zy/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/future/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/future/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/rule/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/rule/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/admin/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/admin/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           #alias /ling-cloud/neo4j-ui/build/;
           alias /ling-cloud/neo4j-ui-g6/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  build.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/rule {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/rule/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:6400;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           #alias /ling-cloud/neo4j-ui/build/;
           alias /ling-cloud/neo4j-ui-g6/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  dxl.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/dxl/app/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
server {
        listen       80;
        listen       443 ssl;
        server_name  onlyoffice.ling2.cn;
 
        charset utf-8;
 
        location / {
          #proxy_pass https://127.0.0.1:60/;
          proxy_pass http://qunhui.ling2.cn:60/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  document.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:59/;
          #proxy_pass http://qunhui.ling2.cn:59/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mongo.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:76/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  investment.ling2.cn;
 
        charset utf-8;
 
        location /GISC/Wenzhou/UAT {
          proxy_pass http://139.224.67.208:80/GISC/Wenzhou/UAT;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
  proxy_set_header X-NginX-Proxy true;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  elasticSearch.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:9200/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  elasticSearchdict.ling2.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/dockerdata/elasticsearch/ikconfig;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  pay.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:5010/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  daixiaole.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:9999/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/dxl/app/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  wikihome.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://qunhui.ling2.cn:73/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  dwct.ling2.cn dwct.daoweicaotang.cn dwct.daoweicaotang.com;
 
        charset utf-8;
 
         location ^~/m.api {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/upload {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/cb{         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:9999/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/unimall/app/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  dwctadmin.ling2.cn dwctadmin.daoweicaotang.cn dwctadmin.daoweicaotang.com;
 
        charset utf-8;
 
         location ^~/m.api {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/upload {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/cb{         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8081;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:9999/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/unimall/unimall-admin/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  md.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/file/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:7000;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location /lib {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /ling-cloud/md/public/lib/;
           index  index.html index.htm;
           expires     -1;
        }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /ling-cloud/md/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  idp.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5005;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           #alias /ling-cloud/neo4j-ui/build/;
           alias /ling-cloud/idp-ui/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  idpapi.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:5005/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  ireader.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass https://www.ireader.com.cn;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       1001;
        location / {
          proxy_pass https://idpuat.philips.com.cn/auth;
          rewrite ^/(.*)$ /auth/$1 break;
        }
    }
    server {
        listen       1002;
        location / {
          proxy_pass https://idpuat.philips.com.cn/admin;
          rewrite ^/(.*)$ /admin/$1 break;
        }
    }
    server {
        listen       1003;
        location / {
          proxy_pass https://idpuat.philips.com.cn/idp;
          rewrite ^/(.*)$ /idp/$1 break;
        }
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  laojia.ling2.cn;
 
        charset utf-8;
 
         location ^~/m.api {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/upload {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/cb{         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:9999/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/laojia/unimall/app/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  laojiaadmin.ling2.cn;
 
        charset utf-8;
 
         location ^~/m.api {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/upload {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/cb{         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8082;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:9999/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /ling-cloud/laojia/unimall/unimall-admin/dist/;
           try_files $uri $uri/ /index.html; 
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  maxkey.ling2.cn;
 
        charset utf-8;
 
         location / {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           proxy_pass https://127.0.0.1:66;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  maxkeymgt.ling2.cn;
 
        charset utf-8;
 
         location / {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           proxy_pass http://127.0.0.1:65;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nextcloud.ling2.cn;
 
        charset utf-8;
 
         location /.well-known/carddav {         
           rewrite /.well-known/carddav /remote.php/dav permanent;
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #proxy_pass http://qunhui.ling2.cn:64;
           proxy_pass http://127.0.0.1:64;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location /.well-known/caldav {         
           rewrite /.well-known/caldav /remote.php/dav permanent;
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #proxy_pass http://qunhui.ling2.cn:64;
           proxy_pass http://127.0.0.1:64;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location / {         
           add_header Content-Security-Policy upgrade-insecure-requests;
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           #proxy_pass http://qunhui.ling2.cn:64;
           proxy_pass http://127.0.0.1:64;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  bi.ling2.cn;
 
        charset utf-8;
          location ^~/api/ver2.0/api/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/api/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location / {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           proxy_pass http://127.0.0.1:6007;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  ls.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/blade-visual {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/blade-visual/(.*)$ /blade-visual/$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/api/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/api/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /alidata/dockerdata/avue-data/dist/;
           try_files $uri $uri/ /index.html; 
           index  index.html index.htm;
           expires     -1;
        }
    }
   server {
        listen       80;
        server_name  qualitis.ling2.cn;
 
        charset utf-8;
        location / {
           proxy_pass https://qualitis-open.wedatasphere.com;
        }
    }
   server {
        listen       80;
        server_name  dss.ling2.cn;
 
        charset utf-8;
        location / {
           proxy_pass https://dss-open.wedatasphere.com;
        }
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  lp.ling2.cn;
 
        charset utf-8;
 
         location ^~/app/api/ver2.0/api/python/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/app/api/ver2.0/api/python/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:8000;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
        location /app {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /ling-cloud/Rider/unpackage/dist/build/h5/;
           try_files $uri $uri/ /index.html; 
           index  index.html index.htm;
           expires     -1;
        }
    }
}
EOF

192.168.74.134

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
user root;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
    proxy_connect_timeout      2000;
    proxy_send_timeout         2000;
    proxy_read_timeout         2000;
 
    #gzip  on;
    server {
        listen       80;
        server_name  192.168.74.134;
 
        charset utf-8;
         location ^~/api/ver2.0/zy/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/zy/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/future/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/future/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/rule/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/rule/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/admin/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/admin/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/auth/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/auth/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/file/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/file/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/pay {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/pay/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         } 
         location ^~/api/ver2.0/es/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/es/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/api/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/api/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5006;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /alidata/dockerdata/ling-cloud-ui2/dist/;
           index  index.html index.htm;
           expires     -1;
        }
    }
    server {
        listen       54;
        server_name  192.168.74.134;
 
        charset utf-8;
         location / {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           proxy_pass https://127.0.0.1:8443;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
    }
    server {
        listen       5002;
        charset utf-8;
        location /api/v3 {
           proxy_set_header   Host             cssdev.jomoo.cn;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           proxy_pass http://127.0.0.1:5007;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
        }
        location / {
          alias /alidata/demo/davinci/webapp/build/;
          index  index.html index.htm;
        }
    }
}
EOF

work

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
user root;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
 
    server {
        listen       80;
        #listen       443 ssl;
        server_name  onlyoffice;
 
        charset utf-8;
 
        location / {
          #proxy_pass https://127.0.0.1:1443/;
          proxy_pass http://www.ling2.win:60/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        #ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        #ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
}
EOF

Nginx配置私有docker registry

参考Nginx配置私有docker registry

ecs nginx.conf with goproxy

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
user root;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
 
    server {
        listen       80;
        listen       443 ssl;
        server_name  wiki.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://localhost:73/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  sincere.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://localhost:973/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zookeeper.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:64/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nexus.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:74/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docker.ling2.cn;
        client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads
        chunked_transfer_encoding on;# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486)
 
        charset utf-8;
 
        location / {
          proxy_pass http://101.132.191.22:8889/; #server.ling2.cn流量问题和nexus.ling2.cn分开
          proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
          proxy_redirect off;
          proxy_buffering off;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m; 
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  rabbitmq.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:78/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mantis.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:69/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlab.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:70/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlabssh.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:10022/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  jenkins.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:71/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kafka.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:72/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mongo.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:76/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  opencron.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:68/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kibana.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:75/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zipkin.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:63/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  oracle.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://101.132.191.22:65/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  explorer.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:62/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  sonar.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://39.98.201.16:61/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  onlyoffice.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:60/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mail.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:58/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docservice.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:59/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  synology.ling2.cn web.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://nas.ling2.win:5000/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          #client_max_body_size    1000m;
        }
        location /photo {
          proxy_pass http://nas.ling2.win:5007/photo ;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          #client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  www.shshenzhen.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/laojia/;
          index  index.html index.htm;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  shshenzhen.ling2.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/laojia/;
          index  index.html index.htm;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  ivs.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://103.237.3.218:8083/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  huarui.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://101.132.191.22:80/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  iit.ling2.cn;
 
        charset utf-8;
 
        location / {
          root /alidata/iit/;
          index  index.html index.html;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
        location /base {
          proxy_pass http://47.100.28.123/base;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /iit {
          proxy_pass http://47.100.28.123/iit;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /file {
          proxy_pass http://47.100.28.123/file;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /websocket {
          proxy_pass http://47.100.28.123/websocket;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  register.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8761/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  eureka.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8761/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  config.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8888/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  base.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:4000/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  auth.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:3000/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gateway.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:9999/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  monitor.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:5001/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  tuleap.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass https://101.132.191.22:55/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nacos.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_pass http://39.98.201.16:8848/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    upstream miniocloud {
        server 127.0.0.1:9001 weight=20 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s;
    }
    proxy_cache_path /alidata/dockerdata/miniocloud/cache levels=1:2 keys_zone=miniocloud_cache:10m max_size=1g inactive=60m use_temp_path=off;
    server {
        listen       80;
        listen       443 ssl;
        server_name  miniocloud.ling2.cn;
 
        charset utf-8;
        location / {
          proxy_cache      miniocloud_cache;
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          #proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_pass http://miniocloud;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    upstream minio {
        server 127.0.0.1:9000 weight=20 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s;
        #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s;
    }
    proxy_cache_path /alidata/dockerdata/minio/cache levels=1:2 keys_zone=minio_cache:10m max_size=1g inactive=60m use_temp_path=off;
    server {
        listen       80;
        listen       443 ssl;
        server_name  minio.ling2.cn;
 
        charset utf-8;
        location / {
          proxy_cache      minio_cache;
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          #proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_next_upstream error timeout http_404;
          proxy_pass http://minio;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  fgzx99.ling2.cn fgzx99.fuguo.ren;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          #proxy_pass http://101.132.191.22:99/;  
          proxy_pass http://127.0.0.1:99/;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  neo4j.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_set_header   Host             $host;
          #proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_body_buffer_size 10M;
          client_max_body_size 10G;
          proxy_buffers 1024 4k;
          proxy_read_timeout 300;
          proxy_pass http://101.132.191.22:7474/;  
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
}
EOF

ecs nginx.conf nogoproxy

ecs nginx.conf nogoproxy

surface nginx.conf

surface nginx.conf

张家口

https 

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
user root;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
    server {
        listen       80;
        listen       443 ssl;
        server_name  cloud.ling2.cn;
 
        charset utf-8;
         location ^~/api/ver2.0/pay {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/pay/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:5010;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           alias /alidata/dockerdata/ling-cloud-ui/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  cloudwiki.ling2.cn;
 
        charset utf-8;
 
         location ^~/api/ver2.0/ {         
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:9999;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
         }

        location / {
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for; 
           #proxy_pass https://127.0.0.1:8000/;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           client_max_body_size    1000m;
  
           alias /alidata/dockerdata/ling-cloud-ui-react/dist/;
           index  index.html index.htm;
           expires     -1;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  onlyoffice.ling2.cn;
 
        charset utf-8;
 
        location / {
          #proxy_pass https://127.0.0.1:1443/;
          proxy_pass http://127.0.0.1:60/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  document.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass https://127.0.0.1:59/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mongo.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:76/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  investment.ling2.cn;
 
        charset utf-8;
 
        location /GISC/Wenzhou/UAT {
          proxy_pass http://139.224.67.208:80/GISC/Wenzhou/UAT;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
		  proxy_set_header X-NginX-Proxy true;
        }
        ssl_certificate      /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem;
    }
}
EOF

inverstment-uat

tee /etc/nginx/nginx.conf <<-'EOF'


user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    include /etc/nginx/conf.d/*.conf;

    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        include /etc/nginx/default.d/*.conf;
		
		
         location ^~/GISC/Wenzhou/UAT/api/ver2.0/ {         
		   proxy_http_version 1.1;
           proxy_set_header   Connection       "";
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           rewrite ^/GISC/Wenzhou/UAT/api/ver2.0/(.*)$ /$1 break;
           proxy_pass http://127.0.0.1:10001;
         }

        location / {
		   proxy_http_version 1.1;
           proxy_set_header   Connection       "";
           proxy_set_header   Host             $host;
           proxy_set_header   X-Real-IP        $remote_addr;
           proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;   
           root /home/admin/nginx/html;
           index  index.html index.htm;
           expires     -1;
        }


        error_page 404 /404.html;
            location = /40x.html {
        }

        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }
}





EOF

https证书申请

https证书申请

前缀

       location ^~/tax-cor/{
        proxy_pass  http://tax-cor/;		 
        proxy_http_version 1.1;
        proxy_set_header   Connection       "";
        proxy_set_header   Host             $host;
        proxy_set_header   X-Real-IP        $remote_addr;
        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
		proxy_redirect http:// $scheme://;
		proxy_connect_timeout 6s;
        proxy_send_timeout 600s;
        proxy_read_timeout 600s;
        proxy_buffer_size 4k;
        proxy_buffers 32 4k;
        proxy_busy_buffers_size 64k;
        client_max_body_size 1000m;
        client_body_buffer_size 128k;
       }

问题解决

nginx 安装时候报错：make: *** No rule to make target build', needed bydefault’. Stop.

在这里插入图片描述
出现此种情况，是linux系统没有安装先决条件

1、GCC——GNU编译器集合（GCC可以使用默认包管理器的仓库（repositories）来安装，包管理器的选择依赖于你使用的Linux发布版本，包管理器有不同的实现：yum是基于Red
Hat的发布版本；apt用于Debian和Ubuntu；yast用于SuSE Linux等等。）

RedHat中安装GCC：

yum install gcc

Ubuntu中安装GCC：

apt-get install gcc

2、PCRE库（Nginx编译需要PCRE（Perl Compatible Regular
Expression），因为Nginx的Rewrite模块和HTTP核心模块会使用到PCRE正则表达式语法。这里需要安装两个安装包pcre和pcre-devel。第一个安装包提供编译版本的库，而第二个提供开发阶段的头文件和编译项目的源代码，这正是我们需要的理由。）

RedHat中安装PCRE：

yum install pcre pcre-devel

Ubuntu中安装PCRE：

apt-get install libpcre3 libpcre3-dev

3、zlib库（zlib库提供了开发人员的压缩算法，在Nginx的各种模块中需要使用gzip压缩。如同安装PCRE一样，同样需要安装库和它的源代码：zlib和zlib-devel。）

RedHat中安装zlib：

yum install zlib zlib-devel

Ubuntu中安装zlib：

apt-get install zlib1g zlib1g-dev

4、OpenSSL库（在Nginx中，如果服务器提供安全网页时则会用到OpenSSL库，我们需要安装库文件和它的开发安装包（openssl和openssl-devel）。）

RedHat中安装OpenSSL：

yum install openssl openssl-devel

Ubuntu中安装OpenSSL：（注：Ubuntu14.04的仓库中没有发现openssl-dev）：

apt-get install openssl openssl-dev

nginx https 服务联调转发

	 server {
        listen       88;
				location / {
                    proxy_pass https://idpuat.philips.com.cn/auth;
					rewrite ^/(.*)$ /auth/$1 break;
        }
	}


server:
  port: 5005

spring:
  application:
    name: philips-idp-admin
  cloud:
    nacos:
      discovery:
        server-addr: nacos.ling2.cn:80
        namespace: c13d515d-4257-4f58-8728-faa474efd7e5
      config:
        server-addr: nacos.ling2.cn:80
        file-extension: yml
        shared-dataids: application-@profiles.active@.yml
        namespace: c13d515d-4257-4f58-8728-faa474efd7e5
  profiles:
    active: @profiles.active@

ribbon:
  nacos:
    enabled: false
#  eureka:
#    enabled: false
ling-cloud-auth:
  ribbon:
#    isSecure: false
#    secure-ports: 443
    listOfServers: localhost:88
    ServerListRefreshInterval: 15000
ling-cloud-admin-biz:
  ribbon:
    listOfServers: cloud.ling2.cn:4000
    ServerListRefreshInterval: 15000
取自“https://wiki.ling2.cn/index.php?title=Nginx-lingserver_阿里云nginx配置&oldid=18819”