From 098d3347a0df808908aab8c554cd7c4febc5e6d9 Mon Sep 17 00:00:00 2001 From: 疯狂的狮子Li <15040126243@163.com> Date: 星期一, 26 八月 2024 11:43:59 +0800 Subject: [PATCH] !577 发布 5.2.2 正式版 安全性提升 Merge pull request !577 from 疯狂的狮子Li/dev --- script/docker/nginx/conf/nginx.conf | 23 +++++++++-------------- 1 files changed, 9 insertions(+), 14 deletions(-) diff --git a/script/docker/nginx/conf/nginx.conf b/script/docker/nginx/conf/nginx.conf index 2aa6587..3c79d97 100644 --- a/script/docker/nginx/conf/nginx.conf +++ b/script/docker/nginx/conf/nginx.conf @@ -31,8 +31,8 @@ server 127.0.0.1:9090; } - upstream powerjob-server { - server 127.0.0.1:7700; + upstream snailjob-server { + server 127.0.0.1:8800; } server { @@ -63,7 +63,7 @@ # } # 闄愬埗澶栫綉璁块棶鍐呯綉 actuator 鐩稿叧璺緞 - location ~ ^(/[^/]*)?/actuator(/.*)?$ { + location ~ ^(/[^/]*)?/actuator.*(/.*)?$ { return 403; } @@ -78,10 +78,13 @@ proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - # websocket鍙傛暟 + proxy_read_timeout 86400s; + # sse 涓� websocket鍙傛暟 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; + proxy_buffering off; + proxy_cache off; proxy_pass http://server/; } @@ -96,20 +99,12 @@ proxy_pass http://monitor-admin/admin/; } - # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤 - # 瑙e喅鏂规1 灏� powerjob 鏈嶅姟 涔熼厤缃垚 https - # 瑙e喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶 - location /powerjob/ { + location /snail-job/ { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_pass http://powerjob-server/; - } - - # 瑙e喅 powerjob 浠g悊涔嬪悗闈欐�佹枃浠舵棤娉曡闂殑闂 璇峰嬁淇敼涔卞姩 - location ~ ^/(js|css|jpg|png|svg|woff|ttf|ico|img)/ { - proxy_pass http://powerjob-server; + proxy_pass http://snailjob-server/snail-job/; } error_page 500 502 503 504 /50x.html; -- Gitblit v1.9.3