From 6c1e146bc17c51ed744aa289b20febe339703196 Mon Sep 17 00:00:00 2001
From: 疯狂的狮子li <15040126243@163.com>
Date: 星期一, 11 七月 2022 13:10:41 +0800
Subject: [PATCH] update 优化 docker 部署方式 使用 host 模式简化部署流程 降低使用成本
---
script/docker/nginx/nginx.conf | 57 ++++++++++++++++++++++++++++++++++-----------------------
1 files changed, 34 insertions(+), 23 deletions(-)
diff --git a/script/docker/nginx/nginx.conf b/script/docker/nginx/nginx.conf
index ddd3ecc..e9630aa 100644
--- a/script/docker/nginx/nginx.conf
+++ b/script/docker/nginx/nginx.conf
@@ -21,18 +21,18 @@
access_log /var/log/nginx/access.log main;
- upstream server {
- ip_hash;
- server 172.30.0.60:8080;
- server 172.30.0.61:8080;
- }
+ upstream server {
+ ip_hash;
+ server 127.0.0.1:8080;
+ server 127.0.0.1:8081;
+ }
upstream monitor-admin {
- server 172.30.0.90:9090;
+ server 127.0.0.1:9090;
}
upstream xxljob-admin {
- server 172.30.0.92:9100;
+ server 127.0.0.1:9100;
}
server {
@@ -62,28 +62,39 @@
# return 200 '{"msg":"婕旂ず妯″紡锛屼笉鍏佽鎿嶄綔","code":500}';
# }
- location / {
+ # 闄愬埗澶栫綉璁块棶鍐呯綉 actuator 鐩稿叧璺緞
+ location ~ ^(/[^/]*)?/actuator(/.*)?$ {
+ return 403;
+ }
+
+ location / {
root /usr/share/nginx/html;
- try_files $uri $uri/ /index.html;
+ try_files $uri $uri/ /index.html;
index index.html index.htm;
}
- location /prod-api/ {
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header REMOTE-HOST $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://server/;
- }
+ location /prod-api/ {
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header REMOTE-HOST $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_pass http://server/;
+ }
- location /admin/ {
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header REMOTE-HOST $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://monitor-admin/admin/;
- }
+ # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤
+ # 瑙ｅ喅鏂规1 灏� admin 鏈嶅姟 涔熼厤缃垚 https
+ # 瑙ｅ喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶
+ location /admin/ {
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header REMOTE-HOST $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_pass http://monitor-admin/admin/;
+ }
+ # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤
+ # 瑙ｅ喅鏂规1 灏� xxljob 鏈嶅姟 涔熼厤缃垚 https
+ # 瑙ｅ喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶
location /xxl-job-admin/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
--
Gitblit v1.9.3