为Jenkins设置Nginx反向代理

灰太狼 2021-12-24 02:05 1388阅读 0赞

### 文章目录 ###

*  为Jenkins设置Nginx反向代理
 *   *  安装Nginx
     *  配置Jenkins
     *  在Nginx中配置Jenkins的反向代理
     *  完整的Jenkins的Nginx配置
     *  常见的反向代理配置
     *  参考文档

# 为Jenkins设置Nginx反向代理 #

在阿里云ECS服务器上装了Jenkins，端口为`8888`端口，在安全组中开放了`8888`端口的访问。

后面想统一通过Nginx来作反向代理，即访问`http://<server_host>/jenkins`时自动跳转到Jenkins的`8888`端口。

这样就不用再在安全组中开放`8888`端口了。

## 安装Nginx ##

# 安装Nginx
    yum install nginx -y
    
    # 以服务方式运行Nginx
    systemctl enable nginx
    systemctl start nginx
    
    # 打开http(80)和https(443)端口
    firewall-cmd --permanent --zone=public --add-service=http
    firewall-cmd --permanent --zone=public --add-service=https
    firewall-cmd --reload

## 配置Jenkins ##

修改`/etc/sysconfig/jenkins`，在`JENKINS_ARGS`参数中添加：

--prefix=/jenkins

重启Jenkins:

systemctl restart jenkins

运行`systemctl status jenkins -l`查看`JENKINS_ARGS`是否生效。

在浏览器中访问`http://<server_ip>:<jenkins_port>/jenkins`，打开Manage Jenkins / Configure System，将Jenkins URL后添加`/jenkins`

## 在Nginx中配置Jenkins的反向代理 ##

# 查看Nginx配置文件位置，以及检查Nginx配置文件格式是否正确
    nginx -t

修改`/etc/nginx/nginx.conf`，添加Jenkins的反向代理：

location /jenkins/ {
        proxy_pass http://127.0.0.1:8888; # Replace as your Jenkins IP and port
    }

> 访问`http://<server_host>/jenkins`时，Nginx会将请求转发到`http://127.0.0.1:8888/jenkins`

再次运行`nginx -t`检查Nginx配置文件格式是否正确。

运行`nginx -s reload`让修改后的Nginx配置文件生效。

在浏览器中访问`http://<server_host>/jenkins`，看是否可以跳转成功。

## 完整的Jenkins的Nginx配置 ##

如果要转发的Jenkins不止一台，且需要精确控制代理参数时，参考以下步骤。

在`/etc/nginx/conf.d`下新增`reverse-upstream.conf`文件：

upstream jenkins { 
      server 127.0.0.1:8888 fail_timeout=0;
    }

在`/etc/nginx/default.d`下新增`reverse-proxy.conf`文件：

location /jenkins { 
        proxy_pass http://jenkins; # jenkins is defined in upstream
        
        # Rewrite HTTPS requests from WAN to HTTP requests on LAN
        # Uncomment this line when enable https for Jenkins
        # proxy_redirect http:// https://;
        
        sendfile off;
        
        proxy_set_header   Host             $host:$server_port;
        # Forwards the real visitor remote IP address to the proxied server.
        proxy_set_header   X-Real-IP        $remote_addr;
        # A list containing the IP addresses of every server the client has been proxied through.
        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        proxy_max_temp_file_size 0;
        
        # This is the maximum upload size
        client_max_body_size       10m;
        client_body_buffer_size    128k;
        
        proxy_connect_timeout      90;
        proxy_send_timeout         90;
        proxy_read_timeout         90;
        
        proxy_temp_file_write_size 64k;
        
        # Defines the HTTP protocol version for proxying, by default it it set to 1.0. For Websockets and keepalive connections you need to use the version 1.1
        proxy_http_version 1.1;
        proxy_request_buffering off;
        proxy_buffering off; # Required for HTTP-based CLI to work over SSL
    }

检查Nginx配置并让修改后的Nginx配置生效：

nginx -t
    nginx -s reload

## 常见的反向代理配置 ##

以下配置只供参考：

location /jenkins { 
        proxy_pass http://127.0.0.1:8888;
        proxy_http_version  1.1;
        proxy_cache_bypass  $http_upgrade;
    
        proxy_set_header Upgrade           $http_upgrade;
        proxy_set_header Connection        "upgrade";
        proxy_set_header Host              $host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host  $host;
        proxy_set_header X-Forwarded-Port  $server_port;
      }

## 参考文档 ##

*  [https://linuxize.com/post/how-to-install-nginx-on-centos-7/][https_linuxize.com_post_how-to-install-nginx-on-centos-7]
 *  [https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/][https_docs.nginx.com_nginx_admin-guide_web-server_reverse-proxy]
 *  [https://wiki.jenkins.io/display/JENKINS/Jenkins+behind+an+NGinX+reverse+proxy][https_wiki.jenkins.io_display_JENKINS_Jenkins_behind_an_NGinX_reverse_proxy]
 *  [https://www.jianshu.com/p/32fe44329889][https_www.jianshu.com_p_32fe44329889]
 *  [在nginx中设置jenkins的反向代理][nginx_jenkins]
 *  [https://linuxize.com/post/nginx-reverse-proxy/][https_linuxize.com_post_nginx-reverse-proxy]
 *  [Nginx 配置反向代理服务器][Nginx]

[https_linuxize.com_post_how-to-install-nginx-on-centos-7]: https://linuxize.com/post/how-to-install-nginx-on-centos-7/
[https_docs.nginx.com_nginx_admin-guide_web-server_reverse-proxy]: https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/
[https_wiki.jenkins.io_display_JENKINS_Jenkins_behind_an_NGinX_reverse_proxy]: https://wiki.jenkins.io/display/JENKINS/Jenkins+behind+an+NGinX+reverse+proxy
[https_www.jianshu.com_p_32fe44329889]: https://www.jianshu.com/p/32fe44329889
[nginx_jenkins]: https://blog.csdn.net/weixin_33963594/article/details/86934706
[https_linuxize.com_post_nginx-reverse-proxy]: https://linuxize.com/post/nginx-reverse-proxy/
[Nginx]: https://www.jianshu.com/p/e98e84a3322f