浏览器输入域名后自动带入后缀的Nginx配置以及防止某些漏洞配置
比如Nginx配置的域名是 fileview.com.cn
浏览器输入这个地址后,自动跳转到 fileview.com.cn/preview 需要如何配置呢?
location / { rewrite ^(.*)$ /preview/$1 last; }
下面介绍Nginx其他的配置
include mime.types; default_type application/octet-stream; # 隐藏Nginx版本号 server_tokens off;
server {
ssl_session_timeout 5m;
# 修复SSL Medium Strength Cipher Suites Supported漏洞 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DES:!3DES; ssl_protocols TLSv1.2; ssl_prefer_server_ciphers on; # Cookie 设置 HTTPOnly 和 Secure 属性 add_header Set-Cookie "Path=/; HttpOnly; Secure"; # 防止XSS-Protection未配置漏洞 add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Content-Type-Options "nosniff"; #后台服务配置,配置了这个location便可以通过http://域名/preview/xxxx 访问 location /preview { proxy_pass http://127.0.0.1:8012; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; }
}
每天学习一点点,你就进步一点点。