Explorar o código

update 更新 nginx https 配置

疯狂的狮子li %!s(int64=3) %!d(string=hai) anos
pai
achega
33ae270b0d
Modificáronse 1 ficheiros con 24 adicións e 0 borrados
  1. 24 0
      docker/nginx/nginx.conf

+ 24 - 0
docker/nginx/nginx.conf

@@ -1,5 +1,8 @@
 worker_processes  1;
 
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
 events {
     worker_connections  1024;
 }
@@ -9,6 +12,14 @@ http {
     default_type  application/octet-stream;
     sendfile        on;
     keepalive_timeout  65;
+    # 限制body大小
+    client_max_body_size 100m;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                          '$status $body_bytes_sent "$http_referer" '
+                          '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
 
 	upstream server {
 		server 172.30.0.60:8080;
@@ -19,6 +30,19 @@ http {
         listen       80;
         server_name  localhost;
 
+        # https配置参考 start
+        #listen       443 ssl;
+
+        # 证书直接存放 /docker/nginx/cert/ 目录下即可 更改证书名称即可 无需更改证书路径
+        #ssl on;
+        #ssl_certificate      /etc/nginx/cert/xxx.local.crt; # /etc/nginx/cert/ 为docker映射路径 不允许更改
+        #ssl_certificate_key  /etc/nginx/cert/xxx.local.key; # /etc/nginx/cert/ 为docker映射路径 不允许更改
+        #ssl_session_timeout 5m;
+        #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        #ssl_prefer_server_ciphers on;
+        # https配置参考 end
+
 		location / {
             root   /usr/share/nginx/html;
 			try_files $uri $uri/ /index.html;