配置文件部分内容
- #REWRITE-START 伪静态相关配置
- include /www/server/panel/vhost/rewrite/python_zjdxz.cn.conf;
- #REWRITE-END
- #禁止访问的文件或目录
- location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md|package.json|package-lock.json|\.env) {
- return 404;
- }
- #一键申请SSL证书验证目录相关设置
- location /.well-known/ {
- root /www/wwwroot/java_node_ssl;
- }
- #禁止在证书验证目录放入敏感文件
- if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
- return 403;
- }
- # HTTP反向代理相关配置开始 >>>
- location ~ /purge(/.*) {
- proxy_cache_purge cache_one 127.0.0.1$request_uri$is_args$args;
- }
- location / {
- proxy_pass http://127.0.0.1:9001;
- proxy_set_header Host 127.0.0.1:$server_port;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header REMOTE-HOST $remote_addr;
- add_header X-Cache $upstream_cache_status;
- proxy_set_header X-Host $host:$server_port;
- proxy_set_header X-Scheme $scheme;
- proxy_connect_timeout 30s;
- proxy_read_timeout 86400s;
- proxy_send_timeout 30s;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- }
复制代码 |