nginx 文件服务器鉴权,nginx笔记-鉴权及转发配置

#user nobody;

worker_processes 3;

error_log logs/error.log;

#error_log logs/error.log notice;

#error_log logs/error.log info;

# pid logs/nginx.pid; # 这个必须停服改

events {

worker_connections 2048;

}

http {

include mime.types;

default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '

'$status $body_bytes_sent "$http_referer" '

'"$http_user_agent" "$http_x_forwarded_for"';

access_log logs/access.log main;

sendfile on;

#tcp_nopush on;

#keepalive_timeout 0;

keepalive_timeout 65;

#gzip on;

gzip on;

gzip_min_length 1k;

gzip_buffers 4 16k;

gzip_http_version 1.0;

gzip_comp_level 6;

gzip_types text/plain text/css text/javascript application/json application/javascript application/x-javascript application/xml;

gzip_vary on;

# http_proxy 设置

client_max_body_size 10m;

client_body_buffer_size 128k;

proxy_connect_timeout 75;

proxy_send_timeout 75;

proxy_read_timeout 75;

proxy_buffer_size 4k;

proxy_buffers 4 32k;

proxy_busy_buffers_size 64k;

proxy_temp_file_write_size 64k;

proxy_temp_path /usr/local/nginx/proxy_temp 1 2;

upstream backend_hexo {

server localhost:8081 max_fails=2 fail_timeout=30s ;

}

server {

listen 80;

server_name localhost;

#charset koi8-r;

access_log logs/host.access.log main;

location / {

auth_request /auth;

add_header Cache-Control no-store;

proxy_set_header Host $host;

proxy_pass http://backend_hexo;

proxy_redirect off;

# 后端的Web服务器可以通过X-Forwarded-For获取用户真实IP

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

}

location = /auth {

proxy_pass http://auth_server:8080/api/hexo_permission;

proxy_pass_request_body off;

proxy_set_header Content-Length "";

proxy_set_header X-Original-URI $request_uri;

}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html

#

error_page 500 502 503 504 /50x.html;

location = /50x.html {

root html;

}

}

}