Nginx配置后台网关映射路径

淩亂°似流年 2022-10-15 07:57 159阅读 0赞

最近项目中需要配置Nginx后台路由网关映射路径，我们这里项目使用了三个网关，分别对应管理平台、APP端、设备端，证书配置到了SLB中，所以这个Nginx没有配置证书（证书配置部分已经注释掉了），如果想要看Nginx证书配置方式，请看另外一篇文章，传送门：[Nginx配置Https证书][Nginx_Https]，特此记录便于日后查阅。

Nginx配置如下：

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
       sendfile            on;
       tcp_nopush          on;
       tcp_nodelay         on;
       keepalive_timeout   10m;
       types_hash_max_size 2048;
    
        #gzip  on;
    
        #server {
        #    listen       80;
        #    server_name  localhost;
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
         #   location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
    
            #error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
        #    error_page   500 502 503 504  /50x.html;
        #    location = /50x.html {
        #        root   html;
        #    }
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        #}
    
    
        # another virtual host using mix of IP-, name-, and port-based configuration
        #
        #server {
        #    listen       8000;
        #    listen       somename:8080;
        #    server_name  somename  alias  another.alias;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
    
        # HTTPS server
        #
        #server {
        #    listen       443 ssl;
        #    server_name  localhost;
    
        #    ssl_certificate      cert.pem;
        #    ssl_certificate_key  cert.key;
    
        #    ssl_session_cache    shared:SSL:1m;
        #    ssl_session_timeout  5m;
    
        #    ssl_ciphers  HIGH:!aNULL:!MD5;
        #    ssl_prefer_server_ciphers  on;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
        gzip on;
        gzip_min_length 1k;
        gzip_comp_level 9;
        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
        gzip_vary on;
        gzip_disable "MSIE [1-6]\.";
    
        upstream admin {
            server localhost:10000 weight=5;
        }
        upstream app {
            server localhost:10010 weight=5;
        }
        upstream device {
            server localhost:10020 weight=5;
        }
    
        #server {
        #   listen 80;
        #   server_name localhost;
        #   rewrite ^(.*)$ https://$host$1 permanent;
        #}
    
        server {
            #listen 443 ssl;
            #server_name  next.galanz.com.cn;
            listen 80;
            server_name  localhost;
    
            client_max_body_size 550M;
            client_header_timeout 20m;
            client_body_timeout 20m;
            proxy_connect_timeout 1500s;
            proxy_read_timeout 20m;
            proxy_send_timeout 20m;
    
            #ssl_certificate      /usr/local/nginx/conf/certs/next1.galanz.com.cn.pem;
            #ssl_certificate_key  /usr/local/nginx/conf/certs/next1.galanz.com.cn.key;
            #ssl_session_cache   shared:SSL:1m;
            #ssl_session_timeout 5m;
            #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
            #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            #ssl_prefer_server_ciphers on;
            
            underscores_in_headers on;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
    
            location ^~ /admin/ {
                proxy_pass http://admin/;
            }
            location ^~ /app/ {
                proxy_pass http://app/;
            }
            location ^~ /device/ {
                proxy_pass http://device/;
            }
            location / {
                root html/dist;
                try_files $uri /index.html;
                index index.html index.htm;
            }
            location ^~ /.well-known {
                allow all;
            }
            location ^~ /apps/galanz {
                if ($http_user_agent ~* "iphone") {
                    rewrite ^(.*)$ https://apps.apple.com/cn/app/%E6%A0%BC%E5%85%B0%E4%BB%95%E7%BE%8E%E9%A3%9F/id1531040880;
                }
                if ($http_user_agent ~* "(mobile|nokia|android|samsung|htc|blackberry)") {
                    rewrite ^(.*)$ https://app.galanz.com.cn/galanz;
                }
            }
            location ^~ /support/after {
                rewrite ^(.*)$ https://www.galanz.com.cn/?page_id=1638;
            }
            location ^~ /galanz/ {
                alias html/galanz/;
            } 
        }
    
        #include blockip.conf;
    }

到此 Nginx配置后台网关映射路径介绍完成。

[Nginx_Https]: https://vegetable-chicken.blog.csdn.net/article/details/117219822