# HTTPS server
server {
listen 443 ssl;
server_name 8.134.160.149;
ssl_certificate /card/moegal/xxx.pem;
ssl_certificate_key /card/moegal/xxx.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://xxx;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# WebSocket specific headers
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
root html;
index index.html index.htm;
}
}
-
proxy_http_version 1.1;
: 设置 HTTP 版本为 1.1,这是 WebSocket 所要求的。 -
proxy_set_header Upgrade $http_upgrade;
和proxy_set_header Connection "upgrade";
: 这些头部设置用于支持 WebSocket 的连接升级。 -
其他
proxy_set_header
指令: 这些头部设置确保请求中包含客户端的原始信息,适用于常规的反向代理设置。