From 098d3347a0df808908aab8c554cd7c4febc5e6d9 Mon Sep 17 00:00:00 2001
From: 疯狂的狮子Li <15040126243@163.com>
Date: 星期一, 26 八月 2024 11:43:59 +0800
Subject: [PATCH] !577 发布 5.2.2 正式版 安全性提升 Merge pull request !577 from 疯狂的狮子Li/dev
---
script/docker/nginx/conf/nginx.conf | 33 ++++++++-------------------------
1 files changed, 8 insertions(+), 25 deletions(-)
diff --git a/script/docker/nginx/conf/nginx.conf b/script/docker/nginx/conf/nginx.conf
index 512ce50..3c79d97 100644
--- a/script/docker/nginx/conf/nginx.conf
+++ b/script/docker/nginx/conf/nginx.conf
@@ -31,11 +31,7 @@
server 127.0.0.1:9090;
}
- upstream powerjob-server {
- server 127.0.0.1:7700;
- }
-
- upstream easyretry-server {
+ upstream snailjob-server {
server 127.0.0.1:8800;
}
@@ -67,7 +63,7 @@
# }
# 闄愬埗澶栫綉璁块棶鍐呯綉 actuator 鐩稿叧璺緞
- location ~ ^(/[^/]*)?/actuator(/.*)?$ {
+ location ~ ^(/[^/]*)?/actuator.*(/.*)?$ {
return 403;
}
@@ -82,10 +78,13 @@
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- # websocket鍙傛暟
+ proxy_read_timeout 86400s;
+ # sse 涓� websocket鍙傛暟
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
+ proxy_buffering off;
+ proxy_cache off;
proxy_pass http://server/;
}
@@ -100,28 +99,12 @@
proxy_pass http://monitor-admin/admin/;
}
- # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤
- # 瑙ｅ喅鏂规1 灏� powerjob 鏈嶅姟 涔熼厤缃垚 https
- # 瑙ｅ喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶
- location /powerjob/ {
+ location /snail-job/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://powerjob-server/;
- }
-
- # 瑙ｅ喅 powerjob 浠ｇ悊涔嬪悗闈欐�佹枃浠舵棤娉曡闂殑闂 璇峰嬁淇敼涔卞姩
- location ~ ^/(js|img|fonts)/ {
- proxy_pass http://powerjob-server;
- }
-
- location /easy-retry/ {
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header REMOTE-HOST $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://easyretry-server/easy-retry/;
+ proxy_pass http://snailjob-server/snail-job/;
}
error_page 500 502 503 504 /50x.html;
--
Gitblit v1.9.3