Teleport堡垒机配置https代理访问

服务器系统版本：CentOS Linux release 7.9.2009 (Core)

Teleport服务端版本：v3.6.4-b3

Teleport没有nginx服务，需要单独部署，再配置https。

vim /etc/nginx/nginx.conf

server {
        listen       443;
        #server_name为ip或域名
        server_name xxx.xxx.xxx.xxx;

        ssl on;

        #证书文件和key文件放在/etc/ssl/certs
        ssl_certificate_key /etc/ssl/certs/xxx.key;
        ssl_certificate /etc/ssl/certs/xxx.pem;

        location / {
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_pass       http://127.0.0.1:7190;

                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
        }
    }