From 6c1e146bc17c51ed744aa289b20febe339703196 Mon Sep 17 00:00:00 2001
From: 疯狂的狮子li <15040126243@163.com>
Date: 星期一, 11 七月 2022 13:10:41 +0800
Subject: [PATCH] update 优化 docker 部署方式 使用 host 模式简化部署流程 降低使用成本
---
script/docker/nginx/nginx.conf | 75 ++++++++++++++++++++++++-------------
1 files changed, 48 insertions(+), 27 deletions(-)
diff --git a/script/docker/nginx/nginx.conf b/script/docker/nginx/nginx.conf
index 93a633e..e9630aa 100644
--- a/script/docker/nginx/nginx.conf
+++ b/script/docker/nginx/nginx.conf
@@ -21,18 +21,18 @@
access_log /var/log/nginx/access.log main;
- upstream server {
- ip_hash;
- server 172.30.0.60:8080;
- server 172.30.0.61:8080;
- }
-
- upstream monitor-admin {
- server 172.30.0.90:9090;
+ upstream server {
+ ip_hash;
+ server 127.0.0.1:8080;
+ server 127.0.0.1:8081;
}
- upstream xxl-job-admin {
- server 172.30.0.92:9100;
+ upstream monitor-admin {
+ server 127.0.0.1:9090;
+ }
+
+ upstream xxljob-admin {
+ server 127.0.0.1:9100;
}
server {
@@ -52,34 +52,55 @@
#ssl_prefer_server_ciphers on;
# https閰嶇疆鍙傝�� end
- location / {
+ # 婕旂ず鐜閰嶇疆 鎷︽埅闄� GET POST 涔嬪鐨勬墍鏈夎姹�
+ # if ($request_method !~* GET|POST) {
+ # rewrite ^/(.*)$ /403;
+ # }
+
+ # location = /403 {
+ # default_type application/json;
+ # return 200 '{"msg":"婕旂ず妯″紡锛屼笉鍏佽鎿嶄綔","code":500}';
+ # }
+
+ # 闄愬埗澶栫綉璁块棶鍐呯綉 actuator 鐩稿叧璺緞
+ location ~ ^(/[^/]*)?/actuator(/.*)?$ {
+ return 403;
+ }
+
+ location / {
root /usr/share/nginx/html;
- try_files $uri $uri/ /index.html;
+ try_files $uri $uri/ /index.html;
index index.html index.htm;
}
- location /prod-api/ {
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header REMOTE-HOST $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://server/;
- }
+ location /prod-api/ {
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header REMOTE-HOST $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_pass http://server/;
+ }
- location /admin/ {
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header REMOTE-HOST $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://monitor-admin/admin/;
- }
+ # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤
+ # 瑙ｅ喅鏂规1 灏� admin 鏈嶅姟 涔熼厤缃垚 https
+ # 瑙ｅ喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶
+ location /admin/ {
+ proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header REMOTE-HOST $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_pass http://monitor-admin/admin/;
+ }
+ # https 浼氭嫤鎴唴閾炬墍鏈夌殑 http 璇锋眰 閫犳垚鍔熻兘鏃犳硶浣跨敤
+ # 瑙ｅ喅鏂规1 灏� xxljob 鏈嶅姟 涔熼厤缃垚 https
+ # 瑙ｅ喅鏂规2 灏嗚彍鍗曢厤缃负澶栭摼璁块棶 璧扮嫭绔嬮〉闈� http 璁块棶
location /xxl-job-admin/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_pass http://xxl-job-admin/xxl-job-admin/;
+ proxy_pass http://xxljob-admin/xxl-job-admin/;
}
error_page 500 502 503 504 /50x.html;
--
Gitblit v1.9.3