记一次防止个人服务器被其他域名指向的nginx配置

最新推荐文章于 2023-07-13 14:20:33 发布

Iron_Huang

最新推荐文章于 2023-07-13 14:20:33 发布

阅读量389

点赞数

分类专栏： nginx 文章标签： nginx

本文链接：https://blog.csdn.net/weixin_45566022/article/details/107707905

版权

nginx 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

早上查看nginx日志的时候发现有多个请求是通过其他域名访问过来的，对方应该设置了域名指向我的服务器ip

遂我修改了nginx配置，限制除了自己的域名，其他域名无法响应，返回404


worker_processes  1;

events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;

    keepalive_timeout  65;


    server {
        listen       80;
        server_name  域名1;
        server_name  域名2;
        charset utf-8;
        set $deny 1;
        if ($host = "域名1"){
		  set $deny  0;
        }
        if ($host = "域名2"){
		  set $deny  0;
        }
        if ($deny = 1) {
        	return 404;
        }
        rewrite ^(.*)$ https://$host$1  permanent;

    }

    server {
        listen       443 ssl;
        server_name  域名1;
	   server_name 域名2;
	   root   root地址;
	   set $deny 1;
        if ($host = "域名1"){
		  set $deny  0;
        }
        if ($host = "域名2"){
		  set $deny  0;
        }
        if ($deny = 1) {
        	return 404;
        }
	   
        ssl_certificate      com.pem;
        ssl_certificate_key  com.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            # 保存原始IP
        	  proxy_set_header X-real-ip           $remote_addr;
            proxy_pass http://127.0.0.1:8080/;
        }
    	   
    }

}