https配置

#user nobody;

user root;

worker_processes 1;

#open 202205

error_log logs/error.log notice;

#pid logs/nginx.pid;

events {

worker_connections 1024;

}

http {

include mime.types;

default_type application/octet-stream;

#log_format main 'remote_addr - remote_user $time_local "$request" '

'status body_bytes_sent "$http_referer" '

'"http_user_agent" "http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;

#tcp_nopush on;

keepalive_timeout 65;

#keepalive_timeout 75;

send_timeout 60;

client_body_timeout 60;

#⚌⚌⚌⚌tomcat⚌⚌⚌⚌⚌⚌⚌,⚌⚌⚌nginx 504⚌⚌⚌⚌

proxy_connect_timeout 600;

proxy_send_timeout 600;

proxy_read_timeout 600;

proxy_buffer_size 16k;

proxy_buffers 4 64k;

proxy_busy_buffers_size 128k;

proxy_temp_file_write_size 128k;

ps:⚌⚌timeout⚌⚌β⚌⚌⚌⚌⚌⚌ʱ⚌⚌Ҫ⚌⚌⚌ô⚌⚌

add_header X-Frame-Options SAMEORIGIN;

#gzip on;

upstream shipServer{

ip_hash;

server 12.26.48.18:100;

server 12.26.48.18:100;

}

upstream casserver{

ip_hash;

server 12.26.48.18:100;

server 12.26.48.18:100;

}

upstream dataServer{

ip_hash;

server 12.26.48.18:100;

server 12.26.48.18:100;

}

server {

listen 80 default_server;

listen :::80 default_server;

server_name sing.com.cn;

return 301 https://hostrequest_uri;

}

HTTPS server

server {

listen 443 ssl;

server_name sing.com.cn;

ssl_certificate /usr/local/nginx/certs/sing.com.cn_cert_chain.pem;

ssl_certificate_key /usr/local/nginx/certs/sing.com.cn_key.key;

ssl_protocols TLSv1.2 TLSv1.3;

ssl_ciphers HIGH:!aNULL:!MD5;

ssl_prefer_server_ciphers on;

ssl_session_cache shared:SSL:10m;

ssl_session_timeout 10m;

client_max_body_size 1024m;

#close 20220720 proxy_redirect off;

#add 20220720 about "/" 301

absolute_redirect off;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_redirect http:// $scheme://;

proxy_set_header X-Forwarded-Proto $scheme;

#close20220720 proxy_set_header Host host:server_port;

#add 20220720

proxy_set_header Host $http_host;

resolver_timeout 600s;

proxy_buffer_size 128k;

proxy_buffers 32 32k;

proxy_busy_buffers_size 128k;

server_tokens off;

proxy_set_header Accept-Encoding ""; # ⚌⚌⚌⚌⚌⚌⚌ sub_filter ⚌⚌⚌

sub_filter 'http://' 'https://';

sub_filter_once off;

sub_filter_types application/json text/html text/javascript application/javascript;

location = / {

#rewrite ^/(.*) https://http_host/ship break;

return 301 /ship;

}

location /shipPosition/ {

proxy_pass http://shipServer/ship/shipPosition;

}

location /ship/ {

proxy_pass http://shipServer;

#same to proxy_pass http://shipServer/ship/;

}

location /kjcas/ {

proxy_pass http://casserver;

}

location /data-origin/ {

proxy_pass http://dataServer;

}

access_log logs/http-proxy-$host.log;

}

}