Surface nginx.conf

来自ling
跳转至： 导航， 搜索

在/etc/hosts中添加一下hosts提高速度 

127.0.0.1   docker.ling2.cn

tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF'
#user  nobody;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
    #access_log  logs/access.log  main;
 
    sendfile        on;
    #tcp_nopush     on;
 
    #keepalive_timeout  0;
    keepalive_timeout  65;
 
    #gzip  on;
 
    server {
        listen       80;
        listen       443 ssl;
        server_name  wiki.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://localhost:73/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zookeeper.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:64/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nexus.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:74/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docker.ling2.win;
        client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads
        chunked_transfer_encoding on;# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486)
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:8889/;
          proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
          proxy_redirect off;
          proxy_buffering off;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  rabbitmq.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:78/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mantis.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:69/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlab.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:70/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  gitlabssh.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:10022/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  jenkins.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:71/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kafka.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:72/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  mongo.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:76/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  opencron.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:68/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  kibana.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:75/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  zipkin.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:63/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  oracle.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:65/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  explorer.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:62/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  sonar.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:61/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  docservice.ling2.win docservice.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:59/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  onlyoffice.ling2.win onlyoffice.ling2.cn;
 
        charset utf-8;
 
        location / {
          proxy_pass http://127.0.0.1:60/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  webman.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://192.168.1.11:5000/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        location /photo {
          proxy_pass http://192.168.1.11:80/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
    server {
        listen       80;
        listen       443 ssl;
        server_name  nas.ling2.win;
 
        charset utf-8;
 
        location / {
          proxy_pass http://192.168.1.11:80/;
          proxy_set_header   Host             $host;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          client_max_body_size    1000m;
        }
        ssl_certificate      /etc/letsencrypt/live/surface.ling2.cn/fullchain.pem;
        ssl_certificate_key  /etc/letsencrypt/live/surface.ling2.cn/privkey.pem;
    }
}
EOF
取自“https://wiki.ling2.cn/index.php?title=Surface_nginx.conf&oldid=13036”