1
http {
2
  # 注释掉默认的 include，防止 80 端口冲突
3
  # include /etc/nginx/conf.d/*.conf;
4

5
  # 引入自定义 HTTP 配置
6
  include /opt/nginx/http/*.conf;
7

8
  # 不限制文件上传大小
9
  client_max_body_size 0;
10
}
11

12
# TCP/UDP 代理（需要在 http 块外部）
13
stream {
14
  include /opt/nginx/server/*.conf;
15
}

1
# a 站点
2
server {
3
    listen 80;
4
    server_name  a.com;
5
    # ...
6
}
7
# b 站点
8
server {
9
    listen 80;
10
    server_name  b.com;
11
    # ...
12
}

1
server {
2
    listen       7000;
3
    server_name  localhost;
4

5
    set $root "/app/h5";
6

7
    location / {
8
        root   $root;
9
        index  index.html;
10
        try_files $uri $uri/ /index.html;
11
        add_header Cache-Control no-cache;
12
    }
13

14
    location ^~ /api {
15
        # 重写：/api/xxx → /xxx
16
        rewrite ^/api/(.*)$ /$1 break;
17

18
        proxy_pass http://192.168.1.20:31100;
19
        proxy_set_header Host $host;
20
        proxy_set_header X-Real-IP $remote_addr;
21
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
22
        proxy_set_header X-Forwarded-Proto $scheme;
23
        proxy_buffering off;
24
    }
25
}

1
server {
2
    listen 80;
3
    listen 443 ssl;
4
    server_name  abc.com;
5

6
    ssl_certificate        /opt/nginx/cert/abc.com.pem;
7
    ssl_certificate_key    /opt/nginx/cert/abc.com.key;
8
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
9
    ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!MD5;
10
    ssl_prefer_server_ciphers on;
11
    ssl_session_cache shared:SSL:10m;
12
    ssl_session_timeout 10m;
13
    add_header Strict-Transport-Security "max-age=31536000";
14
    # HTTP 自动跳转 HTTPS
15
    error_page 497 https://$host$request_uri;
16

17
    location / {
18
        root   /opt/web/html;
19
        index  index.html index.htm;
20
        try_files $uri $uri/ /index.html;
21
    }
22

23
    location /prod-api/ {
24
        proxy_pass http://127.0.0.1:7001/;
25
    }
26
}

1
upstream mysql3306 {
2
    hash $remote_addr consistent;
3
    server 192.168.1.58:3306 weight=5 max_fails=3 fail_timeout=30s;
4
}
5

6
server {
7
    listen 33306;
8
    proxy_connect_timeout 100s;
9
    proxy_timeout 500s;
10
    proxy_pass mysql3306;
11
}

1
map $http_upgrade $connection_upgrade {
2
    default upgrade;
3
    ''      close;
4
}
5

6
server {
7
    listen 8080;
8
    server_name localhost;
9

10
    location /ws {
11
        proxy_pass http://127.0.0.1:9000;
12
        proxy_http_version 1.1;
13
        proxy_set_header Upgrade $http_upgrade;
14
        proxy_set_header Connection $connection_upgrade;
15
        proxy_set_header Host $host;
16
        proxy_set_header X-Real-IP $remote_addr;
17
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
18
        proxy_read_timeout 3600s;
19
        proxy_send_timeout 3600s;
20
    }
21
}

1
server {
2
    listen 9000;
3
    server_name localhost;
4

5
    location / {
6
        proxy_set_header Host $http_host;
7
        proxy_pass http://192.168.1.10:9001;
8
    }
9
}