Nginx
nginx 配置文件介绍
user www www; - 用户,用户组
worker_processes 8; - cpu 核心数
server {
listen 80;
server_name www.dubcat.cn;
root /usr/local/src/xinblog/public;
index index.html;
rewrite ^(.*)$ https://${server_name}$1 permanent;
}
server {
listen 443 ssl;
ssl on;
server_name www.dubcat.cn; #填写绑定证书的域名
ssl_certificate /usr/local/src/xinblog/Nginx/1_dubcat.cn_bundle.crt; # 指定证书的位置,绝对路径
ssl_certificate_key /usr/local/src/xinblog/Nginx/2_dubcat.cn.key; # 绝对路径,同上
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
ssl_prefer_server_ciphers on;
root /usr/local/src/xinblog/public;
index index.html index.htm;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
}
负载均衡配置
- 可以配置权重和ip_hash 模式进行均衡
upstream apptest{
# ip_hash;
server localhost:9000 weight=1;
server localhost:9001 weight=1;
}
server{
listen 10086;
server_name localhost;
location /{
# root html;
# index index.html index.htm;
proxy_pass http://apptest
}
}
远程代理jenkins
location /jenkins/ {
proxy_pass http://192.168.2.41:38080/jenkins/;
proxy_redirect off;
proxy_set_header Host $host:8999;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}