浏览器输入域名后自动带入后缀的Nginx配置以及防止某些漏洞配置

比如Nginx配置的域名是 fileview.com.cn

浏览器输入这个地址后,自动跳转到 fileview.com.cn/preview 需要如何配置呢?

location / {
	rewrite ^(.*)$ /preview/$1 last;
}

  下面介绍Nginx其他的配置

include       mime.types;
default_type  application/octet-stream;
# 隐藏Nginx版本号
server_tokens off;

server {
     ssl_session_timeout 5m;
      # 修复SSL Medium Strength Cipher Suites Supported漏洞 ssl_ciphers ECDHE
-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DES:!3DES; ssl_protocols TLSv1.2; ssl_prefer_server_ciphers on; # Cookie 设置 HTTPOnly 和 Secure 属性 add_header Set-Cookie "Path=/; HttpOnly; Secure"; # 防止XSS-Protection未配置漏洞 add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Content-Type-Options "nosniff";      #后台服务配置,配置了这个location便可以通过http://域名/preview/xxxx 访问 location /preview { proxy_pass http://127.0.0.1:8012; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; }
}

 

posted @ 2022-06-22 17:33  张亮java  阅读(1089)  评论(0编辑  收藏  举报