!577 发布 5.2.2 正式版 安全性提升 Merge pull request !577 from 疯狂的狮子Li/dev

疯狂的狮子Li

2024-08-26 098d3347a0df808908aab8c554cd7c4febc5e6d9

 script/docker/nginx/conf/nginx.conf

@@ -31,7 +31,7 @@
        server 127.0.0.1:9090;
    }

    upstream easyretry-server {
    upstream snailjob-server {
        server 127.0.0.1:8800;
    }

@@ -63,7 +63,7 @@
        # }

        # 限制外网访问内网 actuator 相关路径
        location ~ ^(/[^/]*)?/actuator(/.*)?$ {
        location ~ ^(/[^/]*)?/actuator.*(/.*)?$ {
            return 403;
        }

@@ -78,10 +78,13 @@
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            # websocket参数
            proxy_read_timeout 86400s;
            # sse 与 websocket参数
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_buffering off;
            proxy_cache off;
            proxy_pass http://server/;
        }

@@ -96,12 +99,12 @@
            proxy_pass http://monitor-admin/admin/;
        }

        location /easy-retry/ {
        location /snail-job/ {
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://easyretry-server/easy-retry/;
            proxy_pass http://snailjob-server/snail-job/;
        }

        error_page   500 502 503 504  /50x.html;