1 部署静态网站配置80端口
server {
listen 80;
# 域名
server_name xxx.com;
#指向
location / {
#根目录
root #路径;
#proxy_pass http://127.0.0.1:8311; 其他访问地址
# 首页文件
index index.html index.htm;
}
}
2 部署静态网站443端口配置
server {
listen 443;
server_name xxx.com;
ssl on;# 开启https
ssl_certificate #路径/文件名.pem;
ssl_certificate_key #路径/文件名.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root 路径;
# 代理服务
#proxy_pass http://127.0.0.1:8311; 其他访问地址
index index.html index.htm;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
3 代理数据库配置
stream {
server {
listen 19221;#数据库服务器监听端口
proxy_pass 127.0.0.1:3306;#数据库连接
}
}
4 windows下配置其他资源代理
location /video/ { # 视频资源代理
alias E:\video\fy\video/;# /很有必要 另\t \n 等都有可能被忽略掉,多看错误日志
autoindex on; #开启文件目录浏览功能
autoindex_exact_size on; #显示文件大小从KB显示
autoindex_localtime on; #显示文件修改时间,为服务器本地时间
}
location /mobile {
alias E:\mobile\fy\mobile;
index index.html;
}
5解决代理tomcat时使用redirect跳转后https变为http
location / {
proxy_pass http://127.0.0.1:8311; 其他访问地址
proxy_redirect http:// https://;
proxy_set_header Host $host;
proxy_set_header Referer $http_referer;
proxy_set_header Cookie $http_cookie;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-FORWARDED-HOST $server_addr;
proxy_set_header X-FORWARDED-PORT $server_port;
#该参数也需要配置,保证所有的请求都是同一个scheme
proxy_set_header X-Forwarded-Proto $scheme;
}
6配置websockt代理,放到443端口中就是wss 代理,80端口中就是ws代理
location /ws {
proxy_pass http://127.0.0.1:3211/ws;
proxy_read_timeout 300s;
proxy_send_timeout 300s;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}