瀏覽代碼

add nginx conf server_name xyzshops.cn and ip_addr

ayHaru 4 年之前
父節點
當前提交
c5c1645b86
共有 1 個文件被更改,包括 212 次插入0 次删除
  1. 212 0
      docker/conf/nginx/nginx-xyz-https.conf

+ 212 - 0
docker/conf/nginx/nginx-xyz-https.conf

@@ -130,4 +130,216 @@ http
             include        fastcgi_params;
         }
     }
+
+    server
+        {
+            listen       443 ssl;
+            set  $folder_name /var/www/html;
+            server_name xyzshops.cn;
+            root $folder_name;
+
+            ssl_certificate      cert/www.xyzshops.cn.pem;
+            ssl_certificate_key  cert/www.xyzshops.cn.key;
+
+            ssl_session_cache    shared:SSL:1m;
+            ssl_session_timeout  5m;
+
+            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
+            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
+            ssl_prefer_server_ciphers on;
+
+            index index.html index.php;
+            client_max_body_size 100m;
+            proxy_connect_timeout 500s;
+            proxy_read_timeout 500s;
+            proxy_send_timeout 500s;
+            fastcgi_connect_timeout 75;
+            fastcgi_read_timeout 600;
+            fastcgi_send_timeout 600;
+
+            charset utf-8;
+
+            location /logs {
+                deny all;
+                return 403;
+            }
+
+            location /data/log {
+                deny all;
+                return 403;
+            }
+            location / {
+                index  index.html index.htm index.php;
+            }
+
+            location /mshop {
+                root $folder_name;
+                autoindex on;
+                index  index.html index.htm index.php;
+                try_files $uri $uri/ /mshop/index.html;
+            }
+
+            location /plot {
+                root $folder_name;
+                proxy_pass         http://172.26.105.127:5000;
+                  proxy_redirect     off;
+
+                proxy_set_header   Host                 $host;
+                proxy_set_header   X-Real-IP            $remote_addr;
+                proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
+                proxy_set_header   X-Forwarded-Proto    $scheme;
+            }
+
+            location /merchant {
+                root $folder_name;
+                autoindex on;
+                index  index.html index.htm index.php;
+                try_files $uri $uri/ /merchant/index.html;
+            }
+            location ~ /mobile/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9100;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param  SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ /mobile/[/\w]+\.html$ {
+                try_files $uri $uri/ /mobile/index.html;
+            }
+
+            location ~ /racc/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9101;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param  SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ /mchsrv/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9102;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ \.php$ {
+                add_header Cache-Control no-store;
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9000;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                include        fastcgi_params;
+            }
+        }
+
+    server
+        {
+            listen       443 ssl;
+            set  $folder_name /var/www/html;
+            server_name 121.89.223.81;
+            root $folder_name;
+
+            ssl_certificate      cert/www.xyzshops.cn.pem;
+            ssl_certificate_key  cert/www.xyzshops.cn.key;
+
+            ssl_session_cache    shared:SSL:1m;
+            ssl_session_timeout  5m;
+
+            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #使用此加密套件。
+            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;   #使用该协议进行配置。
+            ssl_prefer_server_ciphers on;
+
+            index index.html index.php;
+            client_max_body_size 100m;
+            proxy_connect_timeout 500s;
+            proxy_read_timeout 500s;
+            proxy_send_timeout 500s;
+            fastcgi_connect_timeout 75;
+            fastcgi_read_timeout 600;
+            fastcgi_send_timeout 600;
+
+            charset utf-8;
+
+            location /logs {
+                deny all;
+                return 403;
+            }
+
+            location /data/log {
+                deny all;
+                return 403;
+            }
+            location / {
+                index  index.html index.htm index.php;
+            }
+
+            location /mshop {
+                root $folder_name;
+                autoindex on;
+                index  index.html index.htm index.php;
+                try_files $uri $uri/ /mshop/index.html;
+            }
+
+            location /plot {
+                root $folder_name;
+                proxy_pass         http://172.26.105.127:5000;
+                  proxy_redirect     off;
+
+                proxy_set_header   Host                 $host;
+                proxy_set_header   X-Real-IP            $remote_addr;
+                proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
+                proxy_set_header   X-Forwarded-Proto    $scheme;
+            }
+
+            location /merchant {
+                root $folder_name;
+                autoindex on;
+                index  index.html index.htm index.php;
+                try_files $uri $uri/ /merchant/index.html;
+            }
+            location ~ /mobile/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9100;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param  SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ /mobile/[/\w]+\.html$ {
+                try_files $uri $uri/ /mobile/index.html;
+            }
+
+            location ~ /racc/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9101;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param  SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ /mchsrv/[/\w]+\.php$ {
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9102;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                fastcgi_param SIGN $http_sign;
+                include fastcgi_params;
+            }
+
+            location ~ \.php$ {
+                add_header Cache-Control no-store;
+                root           $folder_name;
+                fastcgi_pass   docker.hostip:9000;
+                fastcgi_index  index.php;
+                fastcgi_param  SCRIPT_FILENAME  $folder_name$fastcgi_script_name;
+                include        fastcgi_params;
+            }
+        }
 }