查看“Nginx-lingserver 阿里云nginx配置”的源代码
←
Nginx-lingserver 阿里云nginx配置
跳转至：
导航
，
搜索
因为以下原因，您没有权限编辑本页：
您所请求的操作仅限于该用户组的用户使用：
用户
您可以查看与复制此页面的源代码。
[[利用群晖自带的 Nginx 做反向代理]] ==安装== /alidata/server/nginx/sbin/nginx -s stop rm -rf /alidata/server/nginx/logs/*.log /alidata/server/nginx/sbin/nginx -c /alidata/dockerdata/nginx/conf/nginx.conf netstat -tunlp Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service. ===编译安装=== #http://nginx.org/en/download.html cd /alidata/soft wget http://nginx.org/download/nginx-1.17.4.tar.gz tar -zxvf nginx-1.17.4.tar.gz #清空原有文件或cp备份 mv /alidata/server/nginx /alidata/server/nginx_bark 或 rm -rf /alidata/server/nginx yum -y install gcc gcc-c++ pcre-devel openssl openssl-devel apt-get install libpcre3 libpcre3-dev libpcrecpp0v5 libssl-dev zlib1g-dev cd /alidata/soft/nginx-1.17.4 ./configure --prefix=/alidata/server/nginx --conf-path=/alidata/server/nginx/conf/nginx.conf --with-stream --with-http_ssl_module make make install mkdir -p /alidata/dockerdata/nginx/conf cp /alidata/server/nginx/conf/mime.types /alidata/dockerdata/nginx/conf #查看编译结果 cd /alidata/server/nginx ===yum安装没有stream模块=== <s> <source lang=bash> tee /etc/yum.repos.d/nginx.repo <<-'EOF' [nginx] name=nginx repo baseurl=http://nginx.org/packages/centos/7/$basearch/ gpgcheck=0 enabled=1 EOF </source> yum info nginx yum install nginx nginx -s stop nginx -c /alidata/dockerdata/nginx/conf/nginx.conf </s> ==nginx 张家口 all== <source> tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF' #user nobody; user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; proxy_connect_timeout 2000; proxy_send_timeout 2000; proxy_read_timeout 2000; #gzip on; server { listen 80; listen 443 ssl; server_name wiki.ling2.cn; charset utf-8; location / { proxy_pass http://localhost:73/; #proxy_pass http://qunhui.ling2.cn:73/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name yueworldwiki.ling2.cn; charset utf-8; location / { proxy_pass http://localhost:84/; #proxy_pass http://qunhui.ling2.cn:73/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name sincere.ling2.cn; charset utf-8; location / { proxy_pass http://localhost:973/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name zookeeper.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:64/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nexus.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:74/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name docker.ling2.cn; client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads chunked_transfer_encoding on;# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486) charset utf-8; location / { proxy_pass http://101.132.191.22:8889/; #server.ling2.cn流量问题和nexus.ling2.cn分开 proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504; proxy_redirect off; proxy_buffering off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name rabbitmq.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:78/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mantis.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:69/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gitlab.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:70/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gitlabssh.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:10022/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name jenkins.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:71/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name kafka.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:72/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name opencron.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:68/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name kibana.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:75/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name zipkin.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:63/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name oracle.ling2.cn; charset utf-8; location / { proxy_pass http://101.132.191.22:65/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name explorer.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:62/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name sonar.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:61/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mail.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:58/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name docservice.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:59/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name synology.ling2.cn web.ling2.cn; charset utf-8; location / { proxy_pass http://qunhui.ling2.win:5000/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; #client_max_body_size 1000m; } location /photo { proxy_pass http://qunhui.ling2.win:5007/photo ; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; #client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name www.shshenzhen.cn; charset utf-8; location / { root /alidata/laojia/; index index.html index.htm; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name shshenzhen.ling2.cn; charset utf-8; location / { root /alidata/laojia/; index index.html index.htm; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name ivs.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://103.237.3.218:8083/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name huarui.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://101.132.191.22:80/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name iit.ling2.cn; charset utf-8; location / { root /alidata/iit/; index index.html index.html; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /base { proxy_pass http://47.100.28.123/base; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /iit { proxy_pass http://47.100.28.123/iit; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /file { proxy_pass http://47.100.28.123/file; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /websocket { proxy_pass http://47.100.28.123/websocket; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name register.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8761/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name eureka.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8761/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name config.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8888/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name base.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:4000/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name auth.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:3000/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gateway.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:9999/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name monitor.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:5001/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name tuleap.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://101.132.191.22:55/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nifi.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://127.0.0.1:54/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nacos.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8848/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } upstream miniocloud { server 127.0.0.1:9001 weight=20 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s; } proxy_cache_path /alidata/dockerdata/miniocloud/cache levels=1:2 keys_zone=miniocloud_cache:10m max_size=1g inactive=60m use_temp_path=off; server { listen 80; listen 443 ssl; server_name miniocloud.ling2.cn; charset utf-8; location / { proxy_cache miniocloud_cache; proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_pass http://miniocloud; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } upstream minio { server 127.0.0.1:9000 weight=20 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s; } proxy_cache_path /alidata/dockerdata/minio/cache levels=1:2 keys_zone=minio_cache:10m max_size=1g inactive=60m use_temp_path=off; server { listen 80; listen 443 ssl; server_name minio.ling2.cn; charset utf-8; location / { proxy_cache minio_cache; proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_pass http://minio; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name fgzx99.ling2.cn fgzx99.fuguo.ren; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; #proxy_pass http://101.132.191.22:99/; proxy_pass http://127.0.0.1:99/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name neo4j.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_pass http://101.132.191.22:7474/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name cloud.ling2.cn; add_header X-Frame-Options ALLOWALL; add_header Access-Control-Allow-Origin *; add_header Access-Control-Allow-Methods 'GET,POST'; add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization'; charset utf-8; location ^~/api/ver2.0/zy/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/zy/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/future/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/future/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/rule/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/rule/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/admin/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/admin/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/auth/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/auth/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/file/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/file/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/pay { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/pay/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/es/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/es/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/api/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/api/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /bi { proxy_pass https://cafbi.changanford.cn; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; client_max_body_size 100m; client_body_buffer_size 1024k; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #alias /alidata/dockerdata/ling-cloud-ui/dist/; alias /alidata/dockerdata/ling-cloud-ui2/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name cloudwiki.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /alidata/dockerdata/ling-cloud-ui-react/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name zy.ling2.cn; charset utf-8; location ^~/api/ver2.0/zy/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/zy/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/future/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/future/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/rule/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/rule/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/admin/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/admin/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; #alias /ling-cloud/neo4j-ui/build/; alias /ling-cloud/neo4j-ui-g6/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name build.ling2.cn; charset utf-8; location ^~/api/ver2.0/rule { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/rule/(.*)$ /$1 break; proxy_pass http://127.0.0.1:6400; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; #alias /ling-cloud/neo4j-ui/build/; alias /ling-cloud/neo4j-ui-g6/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name dxl.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/dxl/app/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name onlyoffice.ling2.cn; charset utf-8; location / { #proxy_pass https://127.0.0.1:60/; proxy_pass http://qunhui.ling2.cn:60/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name document.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:59/; #proxy_pass http://qunhui.ling2.cn:59/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mongo.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:76/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name investment.ling2.cn; charset utf-8; location /GISC/Wenzhou/UAT { proxy_pass http://139.224.67.208:80/GISC/Wenzhou/UAT; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; proxy_set_header X-NginX-Proxy true; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name elasticSearch.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:9200/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name elasticSearchdict.ling2.cn; charset utf-8; location / { root /alidata/dockerdata/elasticsearch/ikconfig; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name pay.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:5010/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name daixiaole.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:9999/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/dxl/app/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name wikihome.ling2.cn; charset utf-8; location / { proxy_pass http://qunhui.ling2.cn:73/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name dwct.ling2.cn dwct.daoweicaotang.cn dwct.daoweicaotang.com; charset utf-8; location ^~/m.api { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/upload { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/cb{ proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:9999/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/unimall/app/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name dwctadmin.ling2.cn dwctadmin.daoweicaotang.cn dwctadmin.daoweicaotang.com; charset utf-8; location ^~/m.api { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/upload { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/cb{ proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8081; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:9999/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/unimall/unimall-admin/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name md.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/file/(.*)$ /$1 break; proxy_pass http://127.0.0.1:7000; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /lib { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /ling-cloud/md/public/lib/; index index.html index.htm; expires -1; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /ling-cloud/md/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name idp.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5005; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; #alias /ling-cloud/neo4j-ui/build/; alias /ling-cloud/idp-ui/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name idpapi.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:5005/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name ireader.ling2.cn; charset utf-8; location / { proxy_pass https://www.ireader.com.cn; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 1001; location / { proxy_pass https://idpuat.philips.com.cn/auth; rewrite ^/(.*)$ /auth/$1 break; } } server { listen 1002; location / { proxy_pass https://idpuat.philips.com.cn/admin; rewrite ^/(.*)$ /admin/$1 break; } } server { listen 1003; location / { proxy_pass https://idpuat.philips.com.cn/idp; rewrite ^/(.*)$ /idp/$1 break; } } server { listen 80; listen 443 ssl; server_name laojia.ling2.cn; charset utf-8; location ^~/m.api { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/upload { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/cb{ proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:9999/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/laojia/unimall/app/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name laojiaadmin.ling2.cn; charset utf-8; location ^~/m.api { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/upload { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/cb{ proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8082; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:9999/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /ling-cloud/laojia/unimall/unimall-admin/dist/; try_files $uri $uri/ /index.html; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name maxkey.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://127.0.0.1:66; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name maxkeymgt.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://127.0.0.1:65; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nextcloud.ling2.cn; charset utf-8; location /.well-known/carddav { rewrite /.well-known/carddav /remote.php/dav permanent; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass http://qunhui.ling2.cn:64; proxy_pass http://127.0.0.1:64; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /.well-known/caldav { rewrite /.well-known/caldav /remote.php/dav permanent; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass http://qunhui.ling2.cn:64; proxy_pass http://127.0.0.1:64; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { add_header Content-Security-Policy upgrade-insecure-requests; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass http://qunhui.ling2.cn:64; proxy_pass http://127.0.0.1:64; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name bi.ling2.cn; charset utf-8; location ^~/api/ver2.0/api/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/api/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://127.0.0.1:6007; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name ls.ling2.cn; charset utf-8; location ^~/api/ver2.0/blade-visual { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/blade-visual/(.*)$ /blade-visual/$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/api/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/api/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /alidata/dockerdata/avue-data/dist/; try_files $uri $uri/ /index.html; index index.html index.htm; expires -1; } } server { listen 80; server_name qualitis.ling2.cn; charset utf-8; location / { proxy_pass https://qualitis-open.wedatasphere.com; } } server { listen 80; server_name dss.ling2.cn; charset utf-8; location / { proxy_pass https://dss-open.wedatasphere.com; } } server { listen 80; listen 443 ssl; server_name lp.ling2.cn; charset utf-8; location ^~/app/api/ver2.0/api/python/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/app/api/ver2.0/api/python/(.*)$ /$1 break; proxy_pass http://127.0.0.1:8000; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /app { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /ling-cloud/Rider/unpackage/dist/build/h5/; try_files $uri $uri/ /index.html; index index.html index.htm; expires -1; } } } EOF </source> ==192.168.74.134== <source> tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF' #user nobody; user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; proxy_connect_timeout 2000; proxy_send_timeout 2000; proxy_read_timeout 2000; #gzip on; server { listen 80; server_name 192.168.74.134; charset utf-8; location ^~/api/ver2.0/zy/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/zy/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/future/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/future/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/rule/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/rule/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/admin/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/admin/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/auth/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/auth/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/file/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/file/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/pay { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/pay/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/es/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/es/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/api/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/api/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5006; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /alidata/dockerdata/ling-cloud-ui2/dist/; index index.html index.htm; expires -1; } } server { listen 54; server_name 192.168.74.134; charset utf-8; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://127.0.0.1:8443; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } } server { listen 5002; charset utf-8; location /api/v3 { proxy_set_header Host cssdev.jomoo.cn; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://127.0.0.1:5007; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { alias /alidata/demo/davinci/webapp/build/; index index.html index.htm; } } } EOF </source> ==work== <source> tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF' #user nobody; user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; #gzip on; server { listen 80; #listen 443 ssl; server_name onlyoffice; charset utf-8; location / { #proxy_pass https://127.0.0.1:1443/; proxy_pass http://www.ling2.win:60/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } #ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; #ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } } EOF </source> ==Nginx配置私有docker registry== 参考[[Nginx配置私有docker registry]] ==ecs nginx.conf with goproxy== <source lang=bash> tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF' #user nobody; user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; #gzip on; server { listen 80; listen 443 ssl; server_name wiki.ling2.cn; charset utf-8; location / { proxy_pass http://localhost:73/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name sincere.ling2.cn; charset utf-8; location / { proxy_pass http://localhost:973/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name zookeeper.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:64/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nexus.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:74/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name docker.ling2.cn; client_max_body_size 0; # disable any limits to avoid HTTP 413 for large image uploads chunked_transfer_encoding on;# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486) charset utf-8; location / { proxy_pass http://101.132.191.22:8889/; #server.ling2.cn流量问题和nexus.ling2.cn分开 proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504; proxy_redirect off; proxy_buffering off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name rabbitmq.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:78/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mantis.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:69/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gitlab.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:70/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gitlabssh.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:10022/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name jenkins.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:71/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name kafka.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:72/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mongo.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:76/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name opencron.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:68/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name kibana.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:75/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name zipkin.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:63/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name oracle.ling2.cn; charset utf-8; location / { proxy_pass http://101.132.191.22:65/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name explorer.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:62/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name sonar.ling2.cn; charset utf-8; location / { proxy_pass http://39.98.201.16:61/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name onlyoffice.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:60/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mail.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:58/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name docservice.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:59/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name synology.ling2.cn web.ling2.cn; charset utf-8; location / { proxy_pass http://nas.ling2.win:5000/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; #client_max_body_size 1000m; } location /photo { proxy_pass http://nas.ling2.win:5007/photo ; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; #client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name www.shshenzhen.cn; charset utf-8; location / { root /alidata/laojia/; index index.html index.htm; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name shshenzhen.ling2.cn; charset utf-8; location / { root /alidata/laojia/; index index.html index.htm; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name ivs.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://103.237.3.218:8083/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name huarui.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://101.132.191.22:80/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name iit.ling2.cn; charset utf-8; location / { root /alidata/iit/; index index.html index.html; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /base { proxy_pass http://47.100.28.123/base; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /iit { proxy_pass http://47.100.28.123/iit; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /file { proxy_pass http://47.100.28.123/file; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location /websocket { proxy_pass http://47.100.28.123/websocket; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name register.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8761/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name eureka.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8761/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name config.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8888/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name base.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:4000/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name auth.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:3000/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name gateway.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:9999/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name monitor.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:5001/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name tuleap.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://101.132.191.22:55/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name nacos.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://39.98.201.16:8848/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } upstream miniocloud { server 127.0.0.1:9001 weight=20 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s; } proxy_cache_path /alidata/dockerdata/miniocloud/cache levels=1:2 keys_zone=miniocloud_cache:10m max_size=1g inactive=60m use_temp_path=off; server { listen 80; listen 443 ssl; server_name miniocloud.ling2.cn; charset utf-8; location / { proxy_cache miniocloud_cache; proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_pass http://miniocloud; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } upstream minio { server 127.0.0.1:9000 weight=20 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9002 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9003 weight=10 max_fails=2 fail_timeout=30s; #server 127.0.0.1:9004 weight=10 max_fails=2 fail_timeout=30s; } proxy_cache_path /alidata/dockerdata/minio/cache levels=1:2 keys_zone=minio_cache:10m max_size=1g inactive=60m use_temp_path=off; server { listen 80; listen 443 ssl; server_name minio.ling2.cn; charset utf-8; location / { proxy_cache minio_cache; proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_next_upstream error timeout http_404; proxy_pass http://minio; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name fgzx99.ling2.cn fgzx99.fuguo.ren; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; #proxy_pass http://101.132.191.22:99/; proxy_pass http://127.0.0.1:99/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name neo4j.ling2.cn; charset utf-8; location / { proxy_set_header Host $host; #proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_body_buffer_size 10M; client_max_body_size 10G; proxy_buffers 1024 4k; proxy_read_timeout 300; proxy_pass http://101.132.191.22:7474/; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } } EOF </source> ==ecs nginx.conf nogoproxy== [[ecs nginx.conf nogoproxy]] ==surface nginx.conf== [[surface nginx.conf]] ==张家口== https <source> tee /alidata/dockerdata/nginx/conf/nginx.conf <<-'EOF' #user nobody; user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; #gzip on; server { listen 80; listen 443 ssl; server_name cloud.ling2.cn; charset utf-8; location ^~/api/ver2.0/pay { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/pay/(.*)$ /$1 break; proxy_pass http://127.0.0.1:5010; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; alias /alidata/dockerdata/ling-cloud-ui/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name cloudwiki.ling2.cn; charset utf-8; location ^~/api/ver2.0/ { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:9999; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #proxy_pass https://127.0.0.1:8000/; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; alias /alidata/dockerdata/ling-cloud-ui-react/dist/; index index.html index.htm; expires -1; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name onlyoffice.ling2.cn; charset utf-8; location / { #proxy_pass https://127.0.0.1:1443/; proxy_pass http://127.0.0.1:60/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name document.ling2.cn; charset utf-8; location / { proxy_pass https://127.0.0.1:59/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name mongo.ling2.cn; charset utf-8; location / { proxy_pass http://127.0.0.1:76/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } server { listen 80; listen 443 ssl; server_name investment.ling2.cn; charset utf-8; location /GISC/Wenzhou/UAT { proxy_pass http://139.224.67.208:80/GISC/Wenzhou/UAT; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 1000m; proxy_set_header X-NginX-Proxy true; } ssl_certificate /etc/letsencrypt/live/wiki.ling2.cn/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/wiki.ling2.cn/privkey.pem; } } EOF </source> ==inverstment-uat== <source> tee /etc/nginx/nginx.conf <<-'EOF' user root; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; include /usr/share/nginx/modules/*.conf; events { worker_connections 1024; } http { log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; include /etc/nginx/mime.types; default_type application/octet-stream; include /etc/nginx/conf.d/*.conf; server { listen 80 default_server; listen [::]:80 default_server; server_name _; include /etc/nginx/default.d/*.conf; location ^~/GISC/Wenzhou/UAT/api/ver2.0/ { proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; rewrite ^/GISC/Wenzhou/UAT/api/ver2.0/(.*)$ /$1 break; proxy_pass http://127.0.0.1:10001; } location / { proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; root /home/admin/nginx/html; index index.html index.htm; expires -1; } error_page 404 /404.html; location = /40x.html { } error_page 500 502 503 504 /50x.html; location = /50x.html { } } } EOF </source> ==https证书申请== [[https证书申请]] ==前缀== <source> location ^~/tax-cor/{ proxy_pass http://tax-cor/; proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_redirect http:// $scheme://; proxy_connect_timeout 6s; proxy_send_timeout 600s; proxy_read_timeout 600s; proxy_buffer_size 4k; proxy_buffers 32 4k; proxy_busy_buffers_size 64k; client_max_body_size 1000m; client_body_buffer_size 128k; } </source> ==问题解决== <source> nginx 安装时候报错：make: *** No rule to make target build', needed bydefault’. Stop. 在这里插入图片描述 出现此种情况，是linux系统没有安装先决条件 1、GCC——GNU编译器集合（GCC可以使用默认包管理器的仓库（repositories）来安装，包管理器的选择依赖于你使用的Linux发布版本，包管理器有不同的实现：yum是基于Red Hat的发布版本；apt用于Debian和Ubuntu；yast用于SuSE Linux等等。） RedHat中安装GCC： yum install gcc Ubuntu中安装GCC： apt-get install gcc 2、PCRE库（Nginx编译需要PCRE（Perl Compatible Regular Expression），因为Nginx的Rewrite模块和HTTP核心模块会使用到PCRE正则表达式语法。这里需要安装两个安装包pcre和pcre-devel。第一个安装包提供编译版本的库，而第二个提供开发阶段的头文件和编译项目的源代码，这正是我们需要的理由。） RedHat中安装PCRE： yum install pcre pcre-devel Ubuntu中安装PCRE： apt-get install libpcre3 libpcre3-dev 3、zlib库（zlib库提供了开发人员的压缩算法，在Nginx的各种模块中需要使用gzip压缩。如同安装PCRE一样，同样需要安装库和它的源代码：zlib和zlib-devel。） RedHat中安装zlib： yum install zlib zlib-devel Ubuntu中安装zlib： apt-get install zlib1g zlib1g-dev 4、OpenSSL库（在Nginx中，如果服务器提供安全网页时则会用到OpenSSL库，我们需要安装库文件和它的开发安装包（openssl和openssl-devel）。） RedHat中安装OpenSSL： yum install openssl openssl-devel Ubuntu中安装OpenSSL：（注：Ubuntu14.04的仓库中没有发现openssl-dev）： apt-get install openssl openssl-dev </source> ==nginx https 服务联调转发== <source> server { listen 88; location / { proxy_pass https://idpuat.philips.com.cn/auth; rewrite ^/(.*)$ /auth/$1 break; } } server: port: 5005 spring: application: name: philips-idp-admin cloud: nacos: discovery: server-addr: nacos.ling2.cn:80 namespace: c13d515d-4257-4f58-8728-faa474efd7e5 config: server-addr: nacos.ling2.cn:80 file-extension: yml shared-dataids: application-@profiles.active@.yml namespace: c13d515d-4257-4f58-8728-faa474efd7e5 profiles: active: @profiles.active@ ribbon: nacos: enabled: false # eureka: # enabled: false ling-cloud-auth: ribbon: # isSecure: false # secure-ports: 443 listOfServers: localhost:88 ServerListRefreshInterval: 15000 ling-cloud-admin-biz: ribbon: listOfServers: cloud.ling2.cn:4000 ServerListRefreshInterval: 15000 </source>
返回至
Nginx-lingserver 阿里云nginx配置
。
导航菜单
个人工具
登录
命名空间
页面
讨论
变种
视图
阅读
查看源代码
查看历史
更多
搜索
导航
首页
最近更改
随机页面
技术文档
技术索引
mediawiki技术
easyui
tms
VAT模块详细设计
VAT文档目录结构
概要设计文档
常用链接
修改侧边栏
百度链接
百度云盘
开发者中心
BEA程序
应用组成
mantis
wiki
个人信息
家族族谱
工具
链入页面
相关更改
特殊页面
页面信息
