first commit
This commit is contained in:
85
nginx.conf
Normal file
85
nginx.conf
Normal file
@@ -0,0 +1,85 @@
|
||||
|
||||
user root;
|
||||
worker_processes 1;
|
||||
|
||||
#error_log logs/error.log;
|
||||
#error_log logs/error.log notice;
|
||||
#error_log logs/error.log info;
|
||||
|
||||
#pid logs/nginx.pid;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
|
||||
http {
|
||||
include mime.types;
|
||||
default_type application/octet-stream;
|
||||
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
# '$status $body_bytes_sent "$http_referer" '
|
||||
# '"$http_user_agent" "$http_x_forwarded_for"';
|
||||
|
||||
#access_log logs/access.log main;
|
||||
sendfile on;
|
||||
#tcp_nopush on;
|
||||
#keepalive_timeout 0;
|
||||
keepalive_timeout 65;
|
||||
underscores_in_headers on;
|
||||
client_max_body_size 1024M;
|
||||
gzip on;
|
||||
send_timeout 60;
|
||||
server_tokens off;
|
||||
server{
|
||||
listen 443 ssl; # 1.1版本后这样写
|
||||
server_name sanfengyulin.cbsd-pro.com; #填写绑定证书的域名
|
||||
ssl_certificate /opt/cloud_ca/sanfengyulin.cbsd-pro.com.pem; # 指定证书的位置,绝对路径
|
||||
ssl_certificate_key /opt/cloud_ca/sanfengyulin.cbsd-pro.com.key; # 绝对路径,同上
|
||||
ssl_session_timeout 5m;
|
||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
|
||||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
|
||||
ssl_prefer_server_ciphers on;
|
||||
add_header Referrer-Policy "no-referrer" always; ##解决不同源跨域问题
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-Permitted-Cross-Domain-Policies 'none';
|
||||
add_header X-Download-Options "noopen";
|
||||
location / {
|
||||
root /opt/nodeweb/dist/;
|
||||
index index.html index.htm;
|
||||
}
|
||||
location /universaltestsoftware_client_api {
|
||||
proxy_pass http://sanfengyulinapi:8585/universaltestsoftware_client_api/;
|
||||
}
|
||||
}
|
||||
server {
|
||||
listen 80;
|
||||
server_name sanfengyulin.cbsd-pro.com;
|
||||
client_max_body_size 200m;
|
||||
add_header Content-Security-Policy "default-src * data: 'unsafe-inline' 'unsafe-eval';";
|
||||
add_header X-XSS-Protection "1; mode=block";
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header Referrer-Policy "no-referrer" always; ##解决不同源跨域问题
|
||||
add_header X-Frame-Options SAMEORIGIN;
|
||||
add_header X-Permitted-Cross-Domain-Policies 'none';
|
||||
add_header X-Download-Options "noopen";
|
||||
|
||||
location / {
|
||||
root /opt/nodeweb/dist/;
|
||||
index index.html index.htm;
|
||||
}
|
||||
location /universaltestsoftware_client_api {
|
||||
proxy_pass http://sanfengyulinapi:8585/universaltestsoftware_client_api/;
|
||||
}
|
||||
|
||||
#error_page 404 /404.html;
|
||||
|
||||
# redirect server error pages to the static page /50x.html
|
||||
#
|
||||
# error_page 500 502 503 504 /50x.html;
|
||||
error_page 404 403 500 502 503 504 /404.html;
|
||||
location = /50x.html {
|
||||
root html;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user