|
@@ -1,127 +1,136 @@
|
|
|
-user nginx;
|
|
|
-worker_processes 1;
|
|
|
-error_log /var/error.log info;
|
|
|
-worker_rlimit_nofile 1024;
|
|
|
-
|
|
|
-events {
|
|
|
- worker_connections 1024;
|
|
|
-}
|
|
|
-
|
|
|
-http
|
|
|
-{
|
|
|
- include mime.types;
|
|
|
- default_type application/octet-stream;
|
|
|
- fastcgi_buffer_size 32k;
|
|
|
- fastcgi_buffers 8 32k;
|
|
|
- underscores_in_headers on;
|
|
|
- client_max_body_size 1024M;
|
|
|
-
|
|
|
- sendfile on;
|
|
|
- keepalive_timeout 65;
|
|
|
-
|
|
|
- log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
|
|
- '$status $body_bytes_sent "$http_referer" '
|
|
|
- '"$http_user_agent" "$http_x_forwarded_for"';
|
|
|
-
|
|
|
- server
|
|
|
- {
|
|
|
- listen 443 ssl;
|
|
|
- set $folder_name /var/www/html;
|
|
|
- server_name www.lzkj168.cn;
|
|
|
- root $folder_name;
|
|
|
-
|
|
|
- ssl_certificate cert/www.lzkj168.cn.pem;
|
|
|
- ssl_certificate_key cert/www.lzkj168.cn.key;
|
|
|
-
|
|
|
- ssl_session_cache shared:SSL:1m;
|
|
|
- ssl_session_timeout 5m;
|
|
|
-
|
|
|
- ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
|
|
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
|
|
- ssl_prefer_server_ciphers on;
|
|
|
-
|
|
|
- index index.html index.php;
|
|
|
- client_max_body_size 100m;
|
|
|
- proxy_connect_timeout 500s;
|
|
|
- proxy_read_timeout 500s;
|
|
|
- proxy_send_timeout 500s;
|
|
|
- fastcgi_connect_timeout 75;
|
|
|
- fastcgi_read_timeout 600;
|
|
|
- fastcgi_send_timeout 600;
|
|
|
-
|
|
|
- charset utf-8;
|
|
|
-
|
|
|
- location /logs {
|
|
|
- deny all;
|
|
|
- return 403;
|
|
|
- }
|
|
|
-
|
|
|
- location /data/log {
|
|
|
- deny all;
|
|
|
- return 403;
|
|
|
- }
|
|
|
- location / {
|
|
|
- index index.html index.htm index.php;
|
|
|
- }
|
|
|
-
|
|
|
- location /mshop {
|
|
|
- root $folder_name;
|
|
|
- autoindex on;
|
|
|
- index index.html index.htm index.php;
|
|
|
- try_files $uri $uri/ /mshop/index.html;
|
|
|
- }
|
|
|
-
|
|
|
- location /plot {
|
|
|
- root $folder_name;
|
|
|
- proxy_pass http://172.16.110.30:5000;
|
|
|
- proxy_redirect off;
|
|
|
-
|
|
|
- proxy_set_header Host $host;
|
|
|
- proxy_set_header X-Real-IP $remote_addr;
|
|
|
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
- proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
- }
|
|
|
-
|
|
|
- location /merchant {
|
|
|
- root $folder_name;
|
|
|
- autoindex on;
|
|
|
- index index.html index.htm index.php;
|
|
|
- try_files $uri $uri/ /merchant/index.html;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ /mobile/[/\w]+\.php$ {
|
|
|
- root $folder_name;
|
|
|
- fastcgi_pass docker.hostip:9100;
|
|
|
- fastcgi_index index.php;
|
|
|
- fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
- include fastcgi_params;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ /racc/[/\w]+\.php$ {
|
|
|
- root $folder_name;
|
|
|
- fastcgi_pass docker.hostip:9101;
|
|
|
- fastcgi_index index.php;
|
|
|
- fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
- include fastcgi_params;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ /mobile/[/\w]+\.html$ {
|
|
|
- try_files $uri $uri/ /mobile/index.html;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ \.php$ {
|
|
|
- add_header Cache-Control no-store;
|
|
|
- root $folder_name;
|
|
|
- fastcgi_pass docker.hostip:9000;
|
|
|
- fastcgi_index index.php;
|
|
|
- fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
- include fastcgi_params;
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- server {
|
|
|
- listen 443 ssl;
|
|
|
- server_name lzkj168.cn;
|
|
|
- return 301 https://www.lzkj168.cn$request_uri;
|
|
|
- }
|
|
|
-}
|
|
|
+user nginx;
|
|
|
+worker_processes 1;
|
|
|
+error_log /var/error.log info;
|
|
|
+worker_rlimit_nofile 1024;
|
|
|
+
|
|
|
+events {
|
|
|
+ worker_connections 1024;
|
|
|
+}
|
|
|
+
|
|
|
+http
|
|
|
+{
|
|
|
+ include mime.types;
|
|
|
+ default_type application/octet-stream;
|
|
|
+ fastcgi_buffer_size 32k;
|
|
|
+ fastcgi_buffers 8 32k;
|
|
|
+ underscores_in_headers on;
|
|
|
+ client_max_body_size 1024M;
|
|
|
+
|
|
|
+ sendfile on;
|
|
|
+ keepalive_timeout 65;
|
|
|
+
|
|
|
+ log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
|
|
+ '$status $body_bytes_sent "$http_referer" '
|
|
|
+ '"$http_user_agent" "$http_x_forwarded_for"';
|
|
|
+
|
|
|
+ server
|
|
|
+ {
|
|
|
+ listen 443 ssl;
|
|
|
+ set $folder_name /var/www/html;
|
|
|
+ server_name www.lzkj168.cn;
|
|
|
+ root $folder_name;
|
|
|
+
|
|
|
+ ssl_certificate cert/www.lzkj168.cn.pem;
|
|
|
+ ssl_certificate_key cert/www.lzkj168.cn.key;
|
|
|
+
|
|
|
+ ssl_session_cache shared:SSL:1m;
|
|
|
+ ssl_session_timeout 5m;
|
|
|
+
|
|
|
+ ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
|
|
+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
|
|
+ ssl_prefer_server_ciphers on;
|
|
|
+
|
|
|
+ index index.html index.php;
|
|
|
+ client_max_body_size 100m;
|
|
|
+ proxy_connect_timeout 500s;
|
|
|
+ proxy_read_timeout 500s;
|
|
|
+ proxy_send_timeout 500s;
|
|
|
+ fastcgi_connect_timeout 75;
|
|
|
+ fastcgi_read_timeout 600;
|
|
|
+ fastcgi_send_timeout 600;
|
|
|
+
|
|
|
+ charset utf-8;
|
|
|
+
|
|
|
+ location /logs {
|
|
|
+ deny all;
|
|
|
+ return 403;
|
|
|
+ }
|
|
|
+
|
|
|
+ location /data/log {
|
|
|
+ deny all;
|
|
|
+ return 403;
|
|
|
+ }
|
|
|
+ location / {
|
|
|
+ index index.html index.htm index.php;
|
|
|
+ }
|
|
|
+
|
|
|
+ location /mshop {
|
|
|
+ root $folder_name;
|
|
|
+ autoindex on;
|
|
|
+ index index.html index.htm index.php;
|
|
|
+ try_files $uri $uri/ /mshop/index.html;
|
|
|
+ }
|
|
|
+
|
|
|
+ location /plot {
|
|
|
+ root $folder_name;
|
|
|
+ proxy_pass http://172.16.110.30:5000;
|
|
|
+ proxy_redirect off;
|
|
|
+
|
|
|
+ proxy_set_header Host $host;
|
|
|
+ proxy_set_header X-Real-IP $remote_addr;
|
|
|
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
+ proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
+ }
|
|
|
+
|
|
|
+ location /merchant {
|
|
|
+ root $folder_name;
|
|
|
+ autoindex on;
|
|
|
+ index index.html index.htm index.php;
|
|
|
+ try_files $uri $uri/ /merchant/index.html;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ /mobile/[/\w]+\.php$ {
|
|
|
+ root $folder_name;
|
|
|
+ fastcgi_pass docker.hostip:9100;
|
|
|
+ fastcgi_index index.php;
|
|
|
+ fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
+ include fastcgi_params;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ /racc/[/\w]+\.php$ {
|
|
|
+ root $folder_name;
|
|
|
+ fastcgi_pass docker.hostip:9101;
|
|
|
+ fastcgi_index index.php;
|
|
|
+ fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
+ include fastcgi_params;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ /mchsrv/[/\w]+\.php$ {
|
|
|
+ root $folder_name;
|
|
|
+ fastcgi_pass docker.hostip:9102;
|
|
|
+ fastcgi_index index.php;
|
|
|
+ fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
+ fastcgi_param SIGN $http_sign;
|
|
|
+ include fastcgi_params;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ /mobile/[/\w]+\.html$ {
|
|
|
+ try_files $uri $uri/ /mobile/index.html;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ \.php$ {
|
|
|
+ add_header Cache-Control no-store;
|
|
|
+ root $folder_name;
|
|
|
+ fastcgi_pass docker.hostip:9000;
|
|
|
+ fastcgi_index index.php;
|
|
|
+ fastcgi_param SCRIPT_FILENAME $folder_name$fastcgi_script_name;
|
|
|
+ include fastcgi_params;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ server {
|
|
|
+ listen 443 ssl;
|
|
|
+ server_name lzkj168.cn;
|
|
|
+ return 301 https://www.lzkj168.cn$request_uri;
|
|
|
+ }
|
|
|
+}
|