seafile配置nginx反向代理和https访问
官网安装nginx
nginx配置可参考:https://blog.csdn.net/qq948718360/article/details/113086110
配置nginx反向代理
修改nginx文件
正常http和https测试正常后,在https下增加配置
cd /etc/nginx/conf.d #备份*.conf,完成后删除
vim /etc/nginx/conf.d/seafile_ssl.conf #新建一个配置文件
server {
listen 80;
server_name localhost;
if ($host != 'seafile802.cs.com'){
return 403;
}
rewrite ^(.*)$ https://$host$1;
}
server {
listen 443 ssl; #开启SSl
server_name localhost;
if ($host != 'seafile802.cs.com'){
return 403;
}
ssl_certificate /etc/nginx/conf.d/cert/seafile802.pem;
ssl_certificate_key /etc/nginx/conf.d/cert/seafile802.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:8000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-Proto https;
access_log /var/log/nginx/seahub.access.log;
error_log /var/log/nginx/seahub.error.log;
proxy_read_timeout 1200s;
client_max_body_size 0;
}
location /seafhttp {
rewrite ^/seafhttp(.*)$ $1 break;
proxy_pass http://127.0.0.1:8082;
client_max_body_size 0;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 36000s;
proxy_read_timeout 36000s;
proxy_send_timeout 36000s;
send_timeout 36000s;
proxy_request_buffering off;
}
location /media {
root /opt/seafile/seafile-server-latest/seahub;
}
}
server_tokens off; #不显示nginx版本
登陆web管理后台
右上角,系统管理
设置,修改一下两项,www.myseafile.com=你的域名
SERVICE_URL: https://www.myseafile.com
FILE_SERVER_ROOT: https://www.myseafile.com/seafhttp
完成后保存
测试上传/下载
由于seafile上传和下载需要匹配域名,所以web能访问不代表配置正确。
头像不显示问题
8.0.2已经修复头像不显示BUG,如果存在,清空缓存目录即可
rm -rf /tmp/seahub_cache/
重启服务
/opt/seafile/seafile-server-latest/./seafile.sh restart
/opt/seafile/seafile-server-latest/./seahub.sh restart
systemctl restart nginx