DelayNoMore/nginx-templates/tsrht.lokcol.conf
2023-01-18 18:03:54 +08:00

87 lines
2.9 KiB
Plaintext

server {
listen 80;
server_name tsrht.lokcol.com;
access_log /var/log/nginx/tsrht-access.log;
error_log /var/log/nginx/tsrht-err.log;
location ^~ /.well-known/acme-challenge/ {
default_type "text/plain";
# Note that we should have an empty folder "/var/www/letsencrypt/.well-known/acme-challenge/" which is writable by OS user "www-data" or whatever configured in "/etc/nginx/nginx.conf".
# For example under Ubuntu14.04 with nginx1.14.0, you can do "mkdir -p /var/www/letsencrypt/.well-known/acme-challenge/" => "chown -R www-data:www-data /var/www/letsencrypt" => "chmod -R g+s /var/www/letsencrypt".
root /var/www/letsencrypt;
}
}
upstream tsrht_cluster {
hash $uri consistent;
server 127.0.0.1:9992;
}
server {
listen 443;
server_name tsrht.lokcol.com;
root "/var/www/html/tsrht";
index index.html;
access_log /var/log/nginx/tsrht-access.log;
error_log /var/log/nginx/tsrht-err.log;
ssl on;
ssl_certificate /etc/nginx/certs/tsrht.lokcol.com.fullchain.cer;
ssl_certificate_key /etc/nginx/certs/tsrht.lokcol.com.key;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_comp_level 5;
gzip_types text/plain application/x-javascript text/css application/xml text/javascript application/x-http
hp application/json application/javascript;
gzip_vary on;
location ~^/api/(.*)$ {
# Reference http://www.tornadoweb.org/en/stable/guide/running.html
proxy_pass_header Server;
proxy_set_header Host $http_host;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme;
proxy_pass http://tsrht_cluster/api/$1$is_args$args;
}
location ~^/tsrht$ {
# Reference http://www.tornadoweb.org/en/stable/guide/running.html
proxy_pass_header Server;
proxy_set_header Host $http_host;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme;
# Reverse-proxy for ws connection.
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://tsrht_cluster/tsrht$is_args$args;
}
location ~^/tsrhtSecondary$ {
# Reference http://www.tornadoweb.org/en/stable/guide/running.html
proxy_pass_header Server;
proxy_set_header Host $http_host;
proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme;
# Reverse-proxy for ws connection.
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://tsrht_cluster/tsrhtSecondary$is_args$args;
}
}