OMC/build.ems
1
0
Fork 0
Code Issues Activity

feat: 将nginx配置文件分开为HTTP和HTTPS服务，默认单个负载均衡

Browse Source
This commit is contained in:
TsMask
2025-06-05 20:05:48 +08:00
parent 1f11bf2bbc
commit b7a3aca364
3 changed files with 91 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
linux/usr/local/etc/omc/nginx/omc-http.conf Normal file
View File

@@ -0,0 +1,49 @@
upstream lbHTTPByOMC {
server 127.0.0.1:33030 max_fails=3 fail_timeout=30s;
#server 127.0.0.2:33030 max_fails=3 fail_timeout=30s;
}
server {
listen 80;
listen [::]:80;
server_name www.omc.local;
client_max_body_size 100M;
keepalive_timeout 180s;
# access_log /var/log/nginx/host.access.log main;
location / {
root /usr/local/etc/omc/web;
try_files $uri $uri/ /index.html;
index index.html index.htm;
}
location /omc-api/ {
proxy_cache_bypass $http_upgrade;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
proxy_connect_timeout 180s;
proxy_send_timeout 180s;
proxy_read_timeout 180s;
proxy_pass http://lbHTTPByOMC;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
return 301 http://$host$request_uri;
}
}

57
linux/usr/local/etc/omc/nginx/omc.conf → linux/usr/local/etc/omc/nginx/omc-https.conf
View File

@@ -1,56 +1,12 @@
server { upstream lbHTTPSByOMC {
listen 80; server 127.0.0.1:33443 max_fails=3 fail_timeout=30s;
listen [::]:80; #server 127.0.0.2:33443 max_fails=3 fail_timeout=30s;
server_name www.omc.org;
client_max_body_size 100M;
keepalive_timeout 180s;
# access_log /var/log/nginx/host.access.log main;
location / {
root /usr/local/etc/omc/web;
try_files $uri $uri/ /index.html;
index index.html index.htm;
}
location /omc-api/ {
proxy_pass http://127.0.0.1:33030/;
proxy_connect_timeout 180s;
proxy_send_timeout 180s;
proxy_read_timeout 180s;
proxy_cache_bypass $http_upgrade;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
} }
server { server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name www.omc.net; server_name www.omc.net;
client_max_body_size 100M;
keepalive_timeout 180s;
ssl_certificate /usr/local/etc/omc/certs/www.omc.net.crt; ssl_certificate /usr/local/etc/omc/certs/www.omc.net.crt;
ssl_certificate_key /usr/local/etc/omc/certs/www.omc.net.key; ssl_certificate_key /usr/local/etc/omc/certs/www.omc.net.key;
@@ -60,7 +16,12 @@ server {
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
#ssl_dhparam /usr/share/nginx/cert/dhparams.pem; #ssl_dhparam /usr/share/nginx/cert/dhparams.pem;
client_max_body_size 100M;
keepalive_timeout 180s;
# access_log /var/log/nginx/host.access.log main;
location / { location / {
root /usr/local/etc/omc/web; root /usr/local/etc/omc/web;
@@ -83,7 +44,7 @@ server {
proxy_send_timeout 180s; proxy_send_timeout 180s;
proxy_read_timeout 180s; proxy_read_timeout 180s;
proxy_pass https://127.0.0.1:33443/; proxy_pass https://lbHTTPSByOMC;
} }
#error_page 404 /404.html; #error_page 404 /404.html;

33
linux/usr/local/etc/omc/nginx/omc-lb.conf Normal file
View File

@@ -0,0 +1,33 @@
upstream lbByOMC {
server 127.0.0.1:33030 max_fails=3 fail_timeout=30s;
#server 127.0.0.2:33030 max_fails=3 fail_timeout=30s;
}
server {
listen 33040;
listen [::]:33040;
server_name omc;
client_max_body_size 100M;
keepalive_timeout 180s;
# access_log /var/log/nginx/host.access.log main;
location / {
proxy_cache_bypass $http_upgrade;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
proxy_connect_timeout 180s;
proxy_send_timeout 180s;
proxy_read_timeout 180s;
proxy_pass https://lbByOMC;
}
}