nginx负载均衡 laravel5.5项目部署https

不念不忘少年蓝@ 2022-03-27 10:45 357阅读 0赞

### 文章目录 ###

*   *   *  场景
         *  参考资料
         *  分析
         *  解决

### 场景 ###

*  一个项目搭载了负载均衡, 然后需要部署https协议

### 参考资料 ###

*  [Let’s Encrypt实现ssl][Let_s Encrypt_ssl] 之前的一篇博文
 *  [laravel5.5 Configuring Trusted Proxies][]

### 分析 ###

*  [Let’s Encrypt实现ssl][Let_s Encrypt_ssl] 在负载机部署完ssl之后, 发现了下面的问题
    
     *  问题
        
         *  `Mixed Content: The page at 'https://learn.carsonlius.vip/login' was loaded over HTTPS, but requested an insecure stylesheet 'http://learn.carsonlius.vip/css/app.css'. This request has been blocked; the content must be served over HTTPS.`
     *  原因
        
         *  负载均衡机器虽然监听的是443，但是转发到real server的端口是80, 所以是real server是没有办法的分辨协议的

### 解决 ###

> [laravel5.5 Configuring Trusted Proxies][]
> 
> > To solve this, you may use the App\\Http\\Middleware\\TrustProxies middleware that is included in your Laravel application, which allows you to quickly customize the load balancers or proxies that should be trusted by your application. Your trusted proxies should be listed as an array on the $proxies property of this middleware. In addition to configuring the trusted proxies, you may configure the headers that are being sent by your proxy with information about the original request:

<?php
    namespace App\Http\Middleware;
    use Illuminate\Http\Request;
    use Fideloper\Proxy\TrustProxies as Middleware;
    class TrustProxies extends Middleware
    { 
        /** * The trusted proxies for this application. * * @var array */
        protected $proxies = [
            '192.168.1.1',
            '192.168.1.2',
        ];
    
        /** * The current proxy header mappings. * * @var array */
        protected $headers = [
            Request::HEADER_FORWARDED => 'FORWARDED',
            Request::HEADER_X_FORWARDED_FOR => 'X_FORWARDED_FOR',
            Request::HEADER_X_FORWARDED_HOST => 'X_FORWARDED_HOST',
            Request::HEADER_X_FORWARDED_PORT => 'X_FORWARDED_PORT',
            Request::HEADER_X_FORWARDED_PROTO => 'X_FORWARDED_PROTO',
        ];
    }

> > App\\Http\\Middleware\\TrustProxies Middleware的属性$proxies填写负载机的IP, $headers中也需要proxy\_set\_header
> > 
> > > 其实laravel5.5罗列出来的header也不完全是必须的，下面是我的配置
> > > 
> > > > proxy\_set\_header X-Scheme $scheme;  
> > > > proxy\_set\_header X-Real-IP $remote\_addr;  
> > > > proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
> > > > proxy\_set\_header Host $http\_host;  
> > > > proxy\_set\_header X-Forwarded-Proto $scheme;  
> > > > proxy\_set\_header X-NginX-Proxy true;
> 
> nginx 设置X-Forwarded-Proto
> 
> > proxy\_set\_header X-Forwarded-Proto $scheme;

[Let_s Encrypt_ssl]: https://blog.csdn.net/cominglately/article/details/83244772
[laravel5.5 Configuring Trusted Proxies]: https://laravel.com/docs/5.5/requests#configuring-trusted-proxies