This commit is contained in:
parent
71485e7975
commit
91ba66f138
@ -35,6 +35,10 @@ http {
|
|||||||
server 127.0.0.1:8081;
|
server 127.0.0.1:8081;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
upstream searxng {
|
||||||
|
server 127.0.0.1:8082;
|
||||||
|
}
|
||||||
|
|
||||||
upstream twikoo {
|
upstream twikoo {
|
||||||
server 127.0.0.1:8084;
|
server 127.0.0.1:8084;
|
||||||
}
|
}
|
||||||
@ -442,7 +446,8 @@ http {
|
|||||||
server_name notes.amass.fun;
|
server_name notes.amass.fun;
|
||||||
|
|
||||||
client_header_timeout 120s;
|
client_header_timeout 120s;
|
||||||
client_body_timeout 120s;
|
client_body_timeout 120s;
|
||||||
|
client_max_body_size 512M;
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/notes.amass.fun/fullchain.pem;
|
ssl_certificate /etc/letsencrypt/live/notes.amass.fun/fullchain.pem;
|
||||||
ssl_certificate_key /etc/letsencrypt/live/notes.amass.fun/privkey.pem;
|
ssl_certificate_key /etc/letsencrypt/live/notes.amass.fun/privkey.pem;
|
||||||
@ -466,6 +471,68 @@ http {
|
|||||||
proxy_pass http://frp_http_proxy;
|
proxy_pass http://frp_http_proxy;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name minio.amass.fun;
|
||||||
|
|
||||||
|
ssl_certificate /etc/letsencrypt/live/minio.amass.fun/fullchain.pem;
|
||||||
|
ssl_certificate_key /etc/letsencrypt/live/minio.amass.fun/privkey.pem;
|
||||||
|
ssl_session_timeout 5m; #缓存有效期
|
||||||
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #加密算法
|
||||||
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #安全链接可选的加密协议
|
||||||
|
ssl_prefer_server_ciphers on; #使用服务器端的首选算法
|
||||||
|
|
||||||
|
# Allow special characters in headers
|
||||||
|
ignore_invalid_headers off;
|
||||||
|
# Allow any size file to be uploaded.
|
||||||
|
# Set to a value such as 1000m; to restrict file size to a specific value
|
||||||
|
client_max_body_size 0;
|
||||||
|
# Disable buffering
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_request_buffering off;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
|
||||||
|
proxy_connect_timeout 300;
|
||||||
|
# Default is HTTP/1, keepalive is only enabled in HTTP/1.1
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
chunked_transfer_encoding off;
|
||||||
|
|
||||||
|
proxy_pass http://frp_http_proxy;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /minio/ui/ {
|
||||||
|
rewrite ^/minio/ui/(.*) /$1 break;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header X-NginX-Proxy true;
|
||||||
|
|
||||||
|
# This is necessary to pass the correct IP to be hashed
|
||||||
|
real_ip_header X-Real-IP;
|
||||||
|
|
||||||
|
proxy_connect_timeout 300;
|
||||||
|
|
||||||
|
# To support websockets in MinIO versions released after January 2023
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
# Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
|
||||||
|
# Uncomment the following line to set the Origin request to an empty string
|
||||||
|
# proxy_set_header Origin '';
|
||||||
|
|
||||||
|
chunked_transfer_encoding off;
|
||||||
|
|
||||||
|
proxy_pass http://frp_http_proxy;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user