zeekling
/
configs
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

update nginx conf

This commit is contained in:
zeek 2020-03-07 11:35:25 +08:00
parent 25dccfcc31
commit 8c859c3e89
6 changed files with 259 additions and 260 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

260
nginx/sites-available/default
View File

@ -1,260 +0,0 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/www.crt;
ssl_certificate_key /etc/nginx/cert/www.key;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name www.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
# add_header Strict-Transport-Security "max-age=31536000";
# index index.html index.htm index.php;
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8080;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:8080;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /goaccess.html {
autoindex on;
}
location /robots.txt {
autoindex on;
}
location /ByteDanceVerify.html {
autoindex on;
}
location /ads.txt {
autoindex on;
}
location ~ \.php$ {
add_header Strict-Transport-Security "max-age=31536000";
include snippets/fastcgi-php.conf;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
#fastcgi_index index.php;
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
include fastcgi_params;
}
}
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/img.crt;
ssl_certificate_key /etc/nginx/cert/img.key;
root /var/www/html/chevereto;
index index.html index.htm index.nginx-debian.html;
client_max_body_size 50M;
server_name img.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
if (-f $request_filename/index.html) {
rewrite (.*) $1/index.html break;
}
if (-f $request_filename/index.php) {
rewrite (.*) $1/index.php;
}
if (!-f $request_filename) {
rewrite (.*) /index.php;
}
try_files $uri $uri/ /api.php;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
location /admin {
add_header Strict-Transport-Security "max-age=31536000";
try_files $uri /admin/index.php?$args;
}
location ~ \.php$ {
add_header Strict-Transport-Security "max-age=31536000";
include snippets/fastcgi-php.conf;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
#fastcgi_index index.php;
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
include fastcgi_params;
}
}
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/git.crt;
ssl_certificate_key /etc/nginx/cert/git.key;
root /var/www/html;
client_max_body_size 50M;
index index.html index.htm index.nginx-debian.html;
server_name git.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:3003;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:3003;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
}
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/monitor.crt;
ssl_certificate_key /etc/nginx/cert/monitor.key;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name monitor.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8088;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header X-Forwarded-Host $host;
}
}
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/pan.crt;
ssl_certificate_key /etc/nginx/cert/pan.key;
root /var/www/html;
client_max_body_size 500M;
index index.html index.htm index.nginx-debian.html;
server_name pan.zeekling.cn;
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8000;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
}
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:8000;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
}

69
nginx/sites-enabled/default Normal file
View File

@ -0,0 +1,69 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/www.crt;
ssl_certificate_key /etc/nginx/cert/www.key;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name www.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
# add_header Strict-Transport-Security "max-age=31536000";
# index index.html index.htm index.php;
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8080;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:8080;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /goaccess.html {
autoindex on;
}
location /robots.txt {
autoindex on;
}
location /ByteDanceVerify.html {
autoindex on;
}
location /ads.txt {
autoindex on;
}
location ~ \.php$ {
add_header Strict-Transport-Security "max-age=31536000";
include snippets/fastcgi-php.conf;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
#fastcgi_index index.php;
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
include fastcgi_params;
}
}

48
nginx/sites-enabled/git.conf Normal file
View File

@ -0,0 +1,48 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/git.crt;
ssl_certificate_key /etc/nginx/cert/git.key;
root /var/www/html;
client_max_body_size 50M;
index index.html index.htm index.nginx-debian.html;
server_name git.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:3003;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:3003;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
}

66
nginx/sites-enabled/img.conf Normal file
View File

@ -0,0 +1,66 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/img.crt;
ssl_certificate_key /etc/nginx/cert/img.key;
root /var/www/html/chevereto;
index index.html index.htm index.nginx-debian.html;
client_max_body_size 50M;
server_name img.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
if (-f $request_filename/index.html) {
rewrite (.*) $1/index.html break;
}
if (-f $request_filename/index.php) {
rewrite (.*) $1/index.php;
}
if (!-f $request_filename) {
rewrite (.*) /index.php;
}
try_files $uri $uri/ /api.php;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
location /admin {
add_header Strict-Transport-Security "max-age=31536000";
try_files $uri /admin/index.php?$args;
}
location ~ \.php$ {
add_header Strict-Transport-Security "max-age=31536000";
include snippets/fastcgi-php.conf;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
#fastcgi_index index.php;
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
include fastcgi_params;
}
}

28
nginx/sites-enabled/monitor.conf Normal file
View File

@ -0,0 +1,28 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/monitor.crt;
ssl_certificate_key /etc/nginx/cert/monitor.key;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name monitor.zeekling.cn;
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8088;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header X-Forwarded-Host $host;
}
}

48
nginx/sites-enabled/pan.conf Normal file
View File

@ -0,0 +1,48 @@
server {
listen 80 ;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/nginx/cert/pan.crt;
ssl_certificate_key /etc/nginx/cert/pan.key;
root /var/www/html;
client_max_body_size 500M;
index index.html index.htm index.nginx-debian.html;
server_name pan.zeekling.cn;
location / {
add_header Strict-Transport-Security "max-age=31536000";
proxy_pass http://127.0.0.1:8000;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
}
if ( $scheme = http ){
return 301 https://$server_name$request_uri;
}
location ~ .(jpg|png|gif|css|js|pdf|scss|ico|jpeg|bmp|flv|mp4|mp3|swf|wma|wmv|asf|mmf|zip|rar|gz)$ {
proxy_pass http://127.0.0.1:8000;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_cache cache_one;
proxy_cache_valid 200 302 30d;
proxy_cache_valid 301 30d;
proxy_cache_valid any 30d;
expires 30d;
proxy_redirect off;
add_header wall "Stay simple, stay naive.";
}
location /ads.txt {
autoindex on;
}
}