- 无状态nginx配置
- nginx.conf覆盖容器配置
nginx.conf 代码: events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; sendfile on; #tcp_nopush on; keepalive_timeout 65; #gzip on; include /etc/nginx/conf.d/*.conf; # C++网关 server { listen 30001; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; add_header X-XSS-Protection "1; mode=block"; add_header X-Frame-Options "SAMEORIGIN always"; add_header X-Content-Type-Options "nosniff"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { proxy_set_header Connection 'keep-alive'; proxy_read_timeout 6000; proxy_pass http://gatewayserver.rz-dt:30001/; } location /weixin/ { proxy_pass http://ossaccessserver.rz-dt:30002/weixin/; } location /upload/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/upload/; } location /events/ { proxy_pass http://sseserver.rz-dt:30001/events/; } location /getEsignSignUrl/ { proxy_pass http://fileserver.rz-dt:30001/getEsignSignUrl/; } location /public/ { proxy_pass http://sseserver.rz-dt:30001/public/; } location /clean_download/ { proxy_pass http://fileserver.rz-dt:30001/clean_download/; } location /clean_download_data/ { proxy_pass http://fileserver.rz-dt:30001/clean_download_data/; } location /getOssSignUrl/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getOssSignUrl/; } location /getStsToken/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getStsToken/; } location /getPreviewUrl/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/; } location /change_image_background_color/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/change_image_background_color/; } location /docx2pdf/ { client_max_body_size 50M; client_body_buffer_size 50M; proxy_pass http://fileserver.rz-dt:30001/docx2pdf/; } location /getPdfPageNum/ { proxy_pass http://fileserver.rz-dt:30001/getPdfPageNum/; } location /upload_esign/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign; } location /elec_python/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://electronicpythonserver.rz-dt:30001/; } location /download/ { proxy_pass http://fileserver.rz-dt:30001/download/; } location /fdd_notify/ { proxy_pass http://electroniccbpythonserver.rz-dt:30001/; } # location /hdwd_download/ { # client_max_body_size 1024M; # client_body_buffer_size 1024M; # proxy_pass http://investorrelationpythonserver.rz-dt:30001/download_interqa; # } # # 通讯录 # location /address_book/ { # client_max_body_size 1024M; # client_body_buffer_size 1024M; # proxy_pass http://addressbookpythonserver.rz-dt:30001/; # } location /get_doc_info/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://espythonserver.rz-dt:30001/get_doc_info; } location /get_id_list/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://espythonserver.rz-dt:30001/get_id_list; } access_log /var/log/nginx/way.realize.com.cn.log; } # 智库web端v2 server { listen 30002; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; #add_header Content-Security-Policy "default-src 'self' http://zhiku.realize.com.cn; font-src 'self' data:; script-src unsafe-inline; script-src-elem unsafe-inline"; add_header X-XSS-Protection "1; mode=block"; add_header X-Frame-Options "SAMEORIGIN always"; add_header X-Content-Type-Options "nosniff"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { proxy_pass http://frontdongmi-official.rz-dt:30001/; } location /pdf_web/ { proxy_pass http://pdfwebserver.rz-dt:30001/pdf_web/; } location /weixinproxy/ { proxy_pass http://weixinproxyserver.rz-dt:30001/; } location /events/ { proxy_pass http://sseserver.rz-dt:30001/events/; } location /public/ { proxy_pass http://sseserver.rz-dt:30001/public/; } location /office_web/ { proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host view.officeapps.live.com; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_pass https://view.officeapps.live.com/; } location /weapp_esg/ { proxy_pass http://pdfwebserver.rz-dt:30001/weapp_esg/; } location /zhiku/ { proxy_pass http://frontdongmi.rz-dt:30001/zhiku/; #proxy_pass http://frontdongmi-mv-diag.rz-dt:30001/diag/; } location /im/ { proxy_pass http://frontdongmi-zhixin.rz-dt:30001/im/; } location /managePlatForm/ { proxy_pass http://frontdongmi-manager.rz-dt:30001/managePlatForm/; } location /cockpit/ { proxy_pass http://frontdongmi-cockpit.rz-dt:30001/cockpit/; } location /video/ { proxy_pass http://frontdongmi-video.rz-dt:30001/video/; } location /page/ { proxy_pass http://frontdongmi-page.rz-dt:30001/page/; } location /visualization/ { proxy_pass http://frontdongmi-visualization.rz-dt:30001/visualization/; } location /h5/ { proxy_pass http://frontdongmi-h5.rz-dt:30001/h5/; } location /diag/ { proxy_pass http://frontdongmi-mv-diag.rz-dt:30001/diag/; } location /h5_weApp/ { proxy_pass http://frontdongmi-h5-weapp.rz-dt:30001/h5_weApp/; } location /eSign/ { proxy_pass http://frontdongmi-esign.rz-dt:30001/eSign/; } location /esign-h5/ { proxy_pass http://frontdongmi-esign-h5.rz-dt:30001/esign-h5/; } location /m/ { proxy_pass http://frontdongmi-h5.rz-dt:30001/m/; } location /marketData/ { proxy_pass http://frontdongmi-marketdata.rz-dt:30001/marketData/; } location /weixin/ { proxy_pass http://ossaccessserver.rz-dt:30002/weixin/; } location /.well-known/ { proxy_pass http://ossaccessserver.rz-dt:30002/.well-known/; } location /getStsToken/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getStsToken/; } location /rzgateway/ { client_max_body_size 1024M; client_body_buffer_size 1024M; #proxy_pass http://47.101.207.23:8082/; proxy_pass http://application-gateway.rz-dt:8080/; } location /rzwebgateway/ { add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization'; if ($request_method = 'OPTIONS') { return 200; } client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://realize-gateway.rz-dt:9300/; } location /gateway/ { proxy_set_header Connection 'keep-alive'; proxy_pass http://gatewayserver.rz-dt:30001/; } location /upload/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/upload/; } location /getPreviewUrl/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/; } location /upload_esign/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign; } location /download/ { proxy_pass http://fileserver.rz-dt:30001/download/; } location /fdd_notify/ { proxy_pass http://electroniccbpythonserver.rz-dt:30001/; } location /qiyu_notify/ { proxy_pass http://electroniccbpythonserver.rz-dt:30001/; } access_log /var/log/nginx/zhiku.realize.com.cn.log; } # 智库web端v1 server { listen 30006; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; #add_header Content-Security-Policy "default-src 'self' http://zhiku.realize.com.cn; font-src 'self' data:; script-src unsafe-inline; script-src-elem unsafe-inline"; add_header X-XSS-Protection "1; mode=block"; add_header X-Frame-Options "SAMEORIGIN always"; add_header X-Content-Type-Options "nosniff"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { proxy_pass http://frontdongmi-official-v1.rz-dt:30001/; } location /pdf_web/ { proxy_pass http://pdfwebserver.rz-dt:30001/pdf_web/; } location /weapp_esg/ { proxy_pass http://pdfwebserver.rz-dt:30001/weapp_esg/; } location /zhiku/ { proxy_pass http://frontdongmi-v1.rz-dt:30001/zhiku/; } location /managePlatForm/ { proxy_pass http://frontdongmi-manager.rz-dt:30001/managePlatForm/; } location /video/ { proxy_pass http://frontdongmi-video.rz-dt:30001/video/; } location /page/ { proxy_pass http://frontdongmi-page.rz-dt:30001/page/; } location /visualization/ { proxy_pass http://frontdongmi-visualization.rz-dt:30001/visualization/; } location /h5/ { proxy_pass http://frontdongmi-h5.rz-dt:30001/h5/; } location /h5_weApp/ { proxy_pass http://frontdongmi-h5-weapp.rz-dt:30001/h5_weApp/; } location /m/ { proxy_pass http://frontdongmi-h5.rz-dt:30001/m/; } location /marketData/ { proxy_pass http://frontdongmi-marketdata.rz-dt:30001/marketData/; } location /weixin/ { proxy_pass http://ossaccessserver.rz-dt:30002/weixin/; } location /.well-known/ { proxy_pass http://ossaccessserver.rz-dt:30002/.well-known/; } location /getStsToken/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getStsToken/; } location /rzgateway/ { client_max_body_size 1024M; client_body_buffer_size 1024M; #proxy_pass http://47.101.207.23:8082/; #proxy_pass http://139.224.134.101:8082/; proxy_pass http://application-gateway.rz-dt:8080/; } location /rzwebgateway/ { add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization'; if ($request_method = 'OPTIONS') { return 200; } client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://realize-gateway.rz-dt:9300/; } location /gateway/ { proxy_set_header Connection 'keep-alive'; proxy_pass http://gatewayserver.rz-dt:30001/; } location /upload/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/upload/; } location /getPreviewUrl/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/; } location /upload_esign/ { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign; } location /download/ { proxy_pass http://fileserver.rz-dt:30001/download/; } location /fdd_notify/ { proxy_pass http://electroniccbpythonserver.rz-dt:30001/; } access_log /var/log/nginx/zhiku-v1.realize.com.cn.log; } # 荣正网关 server { listen 30003; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { client_max_body_size 1024M; client_body_buffer_size 1024M; proxy_pass http://realize-auth.rz-dt:9301/; } access_log /var/log/nginx/rzgateway.realize.com.cn.log; } # 采集平台 server { listen 30004; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { proxy_pass http://spiderflow.rz-dt:30001/; } access_log /var/log/nginx/spider.realize.com.cn.log; } # 视频营销 server { listen 30005; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; # 转发websocket需要的设置 proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host idtcdn.oss-cn-hangzhou.aliyuncs.com; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { proxy_pass http://idtcdn.oss-cn-hangzhou.aliyuncs.com/; } access_log /var/log/nginx/video.realize.com.cn.log; } # 文件服务 server { listen 30007; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; proxy_set_header X_Forward_For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; location / { client_max_body_size 50M; client_body_buffer_size 50M; proxy_pass http://fileserver.rz-dt:30001/; } access_log /var/log/nginx/file.realize.com.cn.log; } }