Nginx配置SSH + 多端请求转发配置

古城微笑少年丶 2021-12-11 08:11 698阅读 0赞

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
        access_log  logs/access.log  main;
    
        sendfile        on;
    	
        keepalive_timeout  65;
    
        gzip  on;
    	
    	proxy_buffering off;
    
    	upstream static_server{
    		server localhost:8083;
    	}
    	
    	upstream main_server{
    		server localhost:81;
    	}
    	
    	upstream tomcat_server{
    		server localhost:8081;
    	}
    
    	upstream app_server{
    		server localhost:82;
    	}
    	
    
        server {
            listen 80;
    	    listen [::]:80 ssl;
    	    listen 443 ssl;
    	    listen [::]:443 ssl;
            server_name  xxx.xxx.xxx;
    
    	    client_header_timeout    10m;
    	    client_body_timeout      10m;
    	    client_max_body_size  100M;
        	proxy_connect_timeout   18000;   #连接时间为半小时
        	proxy_send_timeout      18000;
        	proxy_read_timeout      18000;
    
    	    ssl on;
    	    ssl_certificate E:/ssl/labinone.crt;
    	    ssl_certificate_key E:/ssl/labinone.key;
            ssl_session_timeout 5m;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_prefer_server_ciphers on;
    
    		location /api {
    			#root   dist;
    			#index  index.html index.htm index.aspx;
    
    
    			proxy_pass http://tomcat_server;
    			
    			proxy_set_header   Host             $host; 
    			proxy_set_header   X-Real-IP        $remote_addr; 
    			proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    		}
    
    		
    		location /instrum {
    		
    			proxy_pass	http://static_server;
    			
    			proxy_set_header   Host             $host; 
    			proxy_set_header   X-Real-IP        $remote_addr; 
    			proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
            }
    		
    		location / {
    		
    			proxy_pass	http://main_server;
    			
    			proxy_set_header   Host             $host; 
    			proxy_set_header   X-Real-IP        $remote_addr; 
    			proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
           }
    		
    
          
        }
    
    
    }