NGINX配置模板

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246

#user  nobody; worker_processes  1;   #error_log  logs/error.log; #error_log  logs/error.log  notice; #error_log  logs/error.log  info;   #pid        logs/nginx.pid;     events {     worker_connections  2048; }     http {     include       mime.types;     default_type  application/octet-stream;     client_max_body_size 100m;     fastcgi_connect_timeout 300;     fastcgi_send_timeout 300;        fastcgi_read_timeout 300;        fastcgi_buffer_size 64k;        fastcgi_buffers 4 64k;           fastcgi_busy_buffers_size 128k;       fastcgi_temp_file_write_size 128k;        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '     #                  '$status $body_bytes_sent "$http_referer" '     #                  '"$http_user_agent" "$http_x_forwarded_for"';       #access_log  logs/access.log  main;       sendfile        on;     tcp_nopush     on;       #keepalive_timeout  0;     keepalive_timeout  65;       #gzip  on;     #add_header X-Frame-Options SAMEORIGIN;     upstream tzxmsp {         server XXX.XX.X.XXX:8080;         ip_hash;     }     upstream spServer{         server XXX.XX.X.XXX:8080;     }               #server {     #   listen 335 default_server;     #   server_name _;     #   location / {     #   return 403;     #   }     #}     server {         listen       335 ssl;         server_name  XXX.XX.X.XXX XX.XXX.XXX.XX XX.XXX.XXX.XXX;         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;         ssl_certificate cert/server.cer;         ssl_certificate_key cert/server.key;         include /etc/nginx/default.d/*.conf;         # gzip config         gzip on;         gzip_min_length 1k;         gzip_comp_level 9;         gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;         gzip_vary on;         gzip_disable "MSIE [1-6]\.";         location / {             #该指令用于设置被代理服务器端口或套接字，以及URI             proxy_pass        http://test/;             proxy_redirect off;             #使用$host变量，它的值相当于服务器的主机名（如果使用域名访问，则该值为域名；如果使用IP访问，则该值为IP）。             #此外可以将主机名和被代理服务器的端口一起传递  $host:$proxy_port,在设置webservice一定要设置$host:$proxy_port，不然会找不到端口             proxy_set_header   Host $host：$server_port;             proxy_set_header   X-Real-IP        $remote_addr;             proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;         }                             #前端         location  ^~ /sjxm-ui/{             proxy_pass  http://XXX.XX.X.XXX:8080/sjxm-ui/;             proxy_cookie_path /sjxm-ui /;             proxy_set_header   Host    $host;             proxy_set_header   X-Real-IP   $remote_addr;             proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;         }                   #前端         location  ^~ /pm-ui/{             proxy_pass  http://XXX.XX.X.XXX:8080/pm-ui/;             proxy_cookie_path /pm-ui /;             proxy_set_header   Host    $host;             proxy_set_header   X-Real-IP   $remote_addr;             proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;         }                   #后端         location  /pm-ui/api/admin/{             proxy_pass  http://XXX.XX.X.XXX:8080/tzxmsp/;             proxy_cookie_path /tzxmsp/  /;             proxy_set_header Host $host:$server_port;             proxy_set_header   X-Real-IP        $remote_addr;             proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;                   }                             location  /sjxm-ui/api/file/ {                   if ($request_uri = '/sjxm-ui/api/file/fileserver/files/') {                 return 403;             }         if ($request_uri = '/sjxm-ui/api/file/fileserver/files') {                 return 403;             }                   proxy_pass  http://XXX.XX.X.XXX:8081/fileserver/;             proxy_set_header Host $host:$server_port;         }                             #前端工程         location  ^~ /bd-ui/{             proxy_pass  http://XXX.XX.X.XXX:9090/bd-ui/;             proxy_cookie_path /bd-ui /;             proxy_set_header   Host    $host;             proxy_set_header   X-Real-IP   $remote_addr;             proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;         }                   #后端工程         location  /bd-ui/api/admin/{             proxy_pass  http://XXX.XX.X.XXX:9090/tzxmsp2/;             proxy_cookie_path /tzxmsp2/  /;             proxy_set_header Host $host:$server_port;             proxy_set_header   X-Real-IP        $remote_addr;             proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;                   }                             #前端工程         location  ^~ /center-ui/{             proxy_pass  http://XXX.XX.X.XXX:9093/center-ui/;             proxy_cookie_path /center-ui /;             proxy_set_header   Host    $host;             proxy_set_header   X-Real-IP   $remote_addr;             proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;         }                   #后端工程         location  /center-ui/api/admin/{             proxy_pass  http://XXX.XX.X.XXX:9093/center/;             proxy_cookie_path /center/  /;             proxy_set_header Host $host:$server_port;             proxy_set_header   X-Real-IP        $remote_addr;             proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;                   }                   #文件服务         location  /center-ui/api/file/ {         if ($request_uri = '/center-ui/api/file/fileserver/files/') {                 return 403;             }         if ($request_uri = '/center-ui/api/file/fileserver/files') {                 return 403;             }         proxy_pass  http://XXX.XX.X.XXX:8081/fileserver/;         proxy_set_header Host $host:$server_port;         }                   #ODF服务转换映射         location  ^~ /odfConvert/{             proxy_pass  http://XX.XXX.XXX.XX/;             proxy_cookie_path /center-ui /;             proxy_set_header   Host    $host;             proxy_set_header   X-Real-IP   $remote_addr;             proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;         }                   #接口拦截         location ~/system/cp/alluser{             deny all;         }         location ~/system/optlog{             deny all;         }         #location /tzxmspweb/api/file/fileserver/files/{         #   deny all;         #}                   #js css 单独配置         #location ~ \.(js|css)$ {         #     proxy_pass http://127.0.0.1:8866;         # }           error_page   500 502 503 504  /50x.html;         location = /50x.html {             root   html;         }     }                     # another virtual host using mix of IP-, name-, and port-based configuration     #     #server {     #    listen       8000;     #    listen       somename:8080;     #    server_name  somename  alias  another.alias;       #    location / {     #        root   html;     #        index  index.html index.htm;     #    }     #}         # HTTPS server     #     #server {     #    listen       443 ssl;     #    server_name  localhost;       #    ssl_certificate      cert.pem;     #    ssl_certificate_key  cert.key;       #    ssl_session_cache    shared:SSL:1m;     #    ssl_session_timeout  5m;       #    ssl_ciphers  HIGH:!aNULL:!MD5;     #    ssl_prefer_server_ciphers  on;       #    location / {     #        root   html;     #        index  index.html index.htm;     #    }     #}   }