1.代理HTTPS访问(PC端适用)
server {
listen 9443 ssl;
#listen 6085 ; 也可以同时用http访问
#域名
server_name hangzhou.xxx.xxx.cn;
#ssl证书
ssl_certificate cert/zyqt.pem;
ssl_certificate_key cert/zyqt.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:8083;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_body_buffer_size 1280k;
proxy_connect_timeout 300;
proxy_send_timeout 300;
proxy_read_timeout 300;
proxy_buffer_size 40k;
proxy_buffers 40 320k;
proxy_busy_buffers_size 640k;
proxy_temp_file_write_size 640k;
#下面这个配置使大文件可访问
client_max_body_size 3000M;
}
#代理静态文件,附件
location /attach {
alias /home/hztcj/;
index index.html;
}
# location / {
# root html;
# index index.html index.htm;
# }
}
2.普通代理
server {
listen 6086;
server_name localhost;
#charset koi8-r;
#access_log logs/host.access.log main;
#代理H5,使页面调用钉钉端不跨域,h5页面在该端口tomcat下
location / {
proxy_pass http://localhost:6680/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_body_buffer_size 1280k;
proxy_connect_timeout 300;
proxy_send_timeout 300;
proxy_read_timeout 300;
proxy_buffer_size 40k;
proxy_buffers 40 320k;
proxy_busy_buffers_size 640k;
proxy_temp_file_write_size 640k;
}
#钉钉端接口
location /api {
proxy_pass http://localhost:6087/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_body_buffer_size 1280k;
proxy_connect_timeout 300;
proxy_send_timeout 300;
proxy_read_timeout 300;
proxy_buffer_size 40k;
proxy_buffers 40 320k;
proxy_busy_buffers_size 640k;
proxy_temp_file_write_size 640k;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}