From 5eff9a50b63c5c7987b1f93534996d2d7a37189b Mon Sep 17 00:00:00 2001
From: 疯狂的狮子Li <15040126243@163.com>
Date: 星期一, 27 六月 2022 23:02:20 +0800
Subject: [PATCH] update 优化 nginx 限制外网访问内网 actuator 相关路径

---
 script/docker/nginx/nginx.conf |   13 +++++++++----
 1 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/script/docker/nginx/nginx.conf b/script/docker/nginx/nginx.conf
index 07df783..daa2acf 100644
--- a/script/docker/nginx/nginx.conf
+++ b/script/docker/nginx/nginx.conf
@@ -23,16 +23,16 @@
 
     upstream server {
         ip_hash;
-        server 172.30.0.60:8080;
-        server 172.30.0.61:8080;
+        server 127.0.0.1:8080;
+        server 127.0.0.1:8080;
     }
 
     upstream monitor-admin {
-        server 172.30.0.90:9090;
+        server 127.0.0.1:9090;
     }
 
     upstream xxljob-admin {
-        server 172.30.0.92:9100;
+        server 127.0.0.1:9100;
     }
 
     server {
@@ -62,6 +62,11 @@
         #     return 200 '{"msg":"婕旂ず妯″紡锛屼笉鍏佽鎿嶄綔","code":500}';
         # }
 
+        # 闄愬埗澶栫綉璁块棶鍐呯綉 actuator 鐩稿叧璺緞
+        location ~ ^(/[^/]*)?/actuator(/.*)?$ {
+            return 403;
+        }
+
         location / {
             root   /usr/share/nginx/html;
             try_files $uri $uri/ /index.html;

--
Gitblit v1.9.3