Nginx推荐配置

# 前言

配置 Jpom 反向代理需要注意如下几点：

开启 websocket
配置文件上传大小
如果使用了二级路径，需要配置二级路径

# Http 相关配置

server {
    #charset koi8-r;
    access_log  /var/log/nginx/jpom.log main;
    listen       80;
    server_name  jpom.xxxxxx.cn;
    
    location / {
        proxy_pass   http://127.0.0.1:2122/;
        proxy_set_header Host      $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        # iframe 重定向
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port $server_port;
        # 上传文件大小
        client_max_body_size  50000m;
        client_body_buffer_size 128k;
        #  websocket 配置
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        #  代理的二级路径配置 值填写nginx 中location的值  如 location /test-path/ {}
        #  proxy_set_header Jpom-ProxyPath      /test-path/;
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

# Https 推荐配置

注意 https 证书需要您自己生成

server {
    listen 443;
    server_name jpom.xxxxxx.cn;
    access_log  /var/log/nginx/jpom.log main;
    ssl on;
    ssl_certificate   /etc/nginx/ssl/jpom-xxxxxx.pem;
    ssl_certificate_key  /etc/nginx/ssl/jpom-xxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    
    location / {
        proxy_pass   http://127.0.0.1:2122/;
        # 代理的二级路径配置 值填写nginx 中location的值  如 location /test-path/ {}
        # proxy_set_header Jpom-ProxyPath      /test-path/;
        proxy_set_header Host      $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        # iframe 重定向
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port $server_port;
        client_max_body_size  50000m;
        client_body_buffer_size 128k;
        #	websocket 配置
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

server {
    #charset koi8-r;
    listen       80;
    server_name  jpom.xxxxxx.cn;
    rewrite ^(.*)$  https://$host$1 permanent;
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

# 二级路径

如果您需要使用二级路径，那么需要配置二级路径。

https://abc.xxxxxx.cn/jpom/

server {
    listen 443;
    server_name abc.xxxxxx.cn;
    access_log  /var/log/nginx/jpom.log main;
    ssl on;
    ssl_certificate   /etc/nginx/ssl/jpom-xxxxxx.pem;
    ssl_certificate_key  /etc/nginx/ssl/jpom-xxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    
    location /jpom/ {
        proxy_pass   http://127.0.0.1:2122/;
        proxy_set_header Jpom-ProxyPath      /jpom/;
        proxy_set_header Host      $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        # iframe 重定向
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port $server_port;
        client_max_body_size  50000m;
        client_body_buffer_size 128k;
        #	websocket 配置
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

帮助我们改善此文档

#Nginx 配置

更新时间: 2023/12/23, 17:01:57

← 初始化服务端 Windows安装→