@ -441,37 +441,6 @@ http {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name notes.amass.fun;
|
|
||||||
|
|
||||||
client_header_timeout 120s;
|
|
||||||
client_body_timeout 120s;
|
|
||||||
client_max_body_size 512M;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/notes.amass.fun/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/notes.amass.fun/privkey.pem;
|
|
||||||
ssl_session_timeout 5m; #缓存有效期
|
|
||||||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #加密算法
|
|
||||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #安全链接可选的加密协议
|
|
||||||
ssl_prefer_server_ciphers on; #使用服务器端的首选算法
|
|
||||||
|
|
||||||
underscores_in_headers on;
|
|
||||||
# proxy_pass_request_headers on;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Connection $http_connection;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header x-wiz-real-ip $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
proxy_pass http://frp_http_proxy;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
server_name minio.amass.fun;
|
server_name minio.amass.fun;
|
||||||
|
@ -10,6 +10,7 @@ ssl_prefer_server_ciphers off;
|
|||||||
location / {
|
location / {
|
||||||
root amass_blog;
|
root amass_blog;
|
||||||
index index.html index.htm;
|
index index.html index.htm;
|
||||||
|
try_files $uri $uri/index.html =404; # 避免 /a/b 重定向 /a/b/
|
||||||
add_header X-Content-Type-Options "nosniff";
|
add_header X-Content-Type-Options "nosniff";
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -93,3 +94,13 @@ location /frp/ {
|
|||||||
proxy_pass http://frp_board/;
|
proxy_pass http://frp_board/;
|
||||||
proxy_redirect /static/ /frp/static/;
|
proxy_redirect /static/ /frp/static/;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
location /searxng {
|
||||||
|
proxy_set_header Connection $http_connection;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_pass http://searxng;
|
||||||
|
}
|
||||||
|
Reference in New Issue
Block a user