• k8s nginx.conf配置文件配置

    • 无状态nginx配置
    • nginx.conf覆盖容器配置
      1. nginx.conf 代码：
      2.  
      3. events {
      4.     worker_connections  1024;
      5. }
      6.  
      7.  
      8. http {
      9.     include       /etc/nginx/mime.types;
      10.     default_type  application/octet-stream;
      11.  
      12.     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
      13.                       '$status $body_bytes_sent "$http_referer" '
      14.                       '"$http_user_agent" "$http_x_forwarded_for"';
      15.  
      16.     access_log  /var/log/nginx/access.log;
      17.     error_log  /var/log/nginx/error.log;
      18.  
      19.     sendfile        on;
      20.     #tcp_nopush     on;
      21.  
      22.     keepalive_timeout  65;
      23.  
      24.     #gzip  on;
      25.  
      26.     include /etc/nginx/conf.d/*.conf;
      27.  
      28. 	# C++网关
      29. 	server
      30. 	{
      31. 		listen 30001;
      32. 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      33.                 add_header X-XSS-Protection "1; mode=block";
      34.                 add_header X-Frame-Options "SAMEORIGIN always";
      35.                 add_header X-Content-Type-Options "nosniff";
      36. 		# 转发websocket需要的设置
      37. 		proxy_set_header X-Real_IP $remote_addr;
      38. 		proxy_set_header Host $host;
      39. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      40. 		proxy_http_version 1.1;
      41. 		proxy_set_header Upgrade $http_upgrade;
      42. 		proxy_set_header Connection 'upgrade';
      43. 		location / {
      44.                        proxy_set_header Connection 'keep-alive';
      45.                        proxy_read_timeout 6000;
      46. 		       proxy_pass http://gatewayserver.rz-dt:30001/;
      47. 		}
      48. 		location /weixin/ {
      49. 			proxy_pass http://ossaccessserver.rz-dt:30002/weixin/;
      50. 		}
      51. 		location /upload/ {
      52. 			client_max_body_size 1024M;
      53. 			client_body_buffer_size 1024M;
      54. 			proxy_pass http://fileserver.rz-dt:30001/upload/;
      55. 		}
      56. 		location /events/ {
      57. 			proxy_pass http://sseserver.rz-dt:30001/events/;
      58. 		}
      59. 		location /getEsignSignUrl/ {
      60. 			proxy_pass http://fileserver.rz-dt:30001/getEsignSignUrl/;
      61. 		}
      62. 		location /public/ {
      63. 			proxy_pass http://sseserver.rz-dt:30001/public/;
      64. 		}
      65. 		location /clean_download/ {
      66. 			proxy_pass http://fileserver.rz-dt:30001/clean_download/;
      67. 		}
      68. 		location /clean_download_data/ {
      69. 			proxy_pass http://fileserver.rz-dt:30001/clean_download_data/;
      70. 		}
      71. 		location /getOssSignUrl/ {
      72. 			client_max_body_size 1024M;
      73. 			client_body_buffer_size 1024M;
      74. 			proxy_pass http://fileserver.rz-dt:30001/getOssSignUrl/;
      75. 		}
      76. 		location /getStsToken/ {
      77. 			client_max_body_size 1024M;
      78. 			client_body_buffer_size 1024M;
      79. 			proxy_pass http://fileserver.rz-dt:30001/getStsToken/;
      80. 		}
      81. 		location /getPreviewUrl/ {
      82. 			client_max_body_size 1024M;
      83. 			client_body_buffer_size 1024M;
      84. 			proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/;
      85. 		}
      86. 		location /change_image_background_color/ {
      87. 			client_max_body_size 1024M;
      88. 			client_body_buffer_size 1024M;
      89. 			proxy_pass http://fileserver.rz-dt:30001/change_image_background_color/;
      90. 		}
      91. 		location /docx2pdf/ {
      92. 			client_max_body_size 50M;
      93. 			client_body_buffer_size 50M;
      94. 			proxy_pass http://fileserver.rz-dt:30001/docx2pdf/;
      95. 		}
      96. 		location /getPdfPageNum/ {
      97. 			proxy_pass http://fileserver.rz-dt:30001/getPdfPageNum/;
      98. 		}
      99. 		location /upload_esign/ {
      100. 			client_max_body_size 1024M;
      101. 			client_body_buffer_size 1024M;
      102. 			proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign;
      103. 		}
      104. 		location /elec_python/ {
      105. 			client_max_body_size 1024M;
      106. 			client_body_buffer_size 1024M;
      107. 			proxy_pass http://electronicpythonserver.rz-dt:30001/;
      108. 		}
      109. 		location /download/ {
      110. 			proxy_pass http://fileserver.rz-dt:30001/download/;
      111. 		}
      112. 		location /fdd_notify/ {
      113. 			proxy_pass http://electroniccbpythonserver.rz-dt:30001/;
      114. 		}
      115. 		# location /hdwd_download/ {
      116. 		# 	client_max_body_size 1024M;
      117. 		# 	client_body_buffer_size 1024M;
      118. 		# 	proxy_pass http://investorrelationpythonserver.rz-dt:30001/download_interqa;
      119. 		# }
      120.  
      121. 		# # 通讯录
      122.         # location /address_book/ {
      123.         #     client_max_body_size 1024M;
      124.         #     client_body_buffer_size 1024M;
      125. 		# 	proxy_pass http://addressbookpythonserver.rz-dt:30001/;
      126. 		# }
      127.  
      128. 		location /get_doc_info/ {
      129. 			client_max_body_size 1024M;
      130. 			client_body_buffer_size 1024M;
      131. 			proxy_pass http://espythonserver.rz-dt:30001/get_doc_info;
      132. 		}
      133.  
      134. 		location /get_id_list/ {
      135. 			client_max_body_size 1024M;
      136. 			client_body_buffer_size 1024M;
      137. 			proxy_pass http://espythonserver.rz-dt:30001/get_id_list;
      138. 		}
      139. 		access_log /var/log/nginx/way.zhi.real.com.log;
      140. 	}
      141. 	
      142. 	# 智库web端v2
      143. 	server
      144. 	{
      145. 		listen 30002;
      146. 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      147.                 #add_header Content-Security-Policy "default-src 'self' http://zhi.real.com; font-src 'self' data:; script-src unsafe-inline; script-src-elem unsafe-inline";
      148.                 add_header X-XSS-Protection "1; mode=block";
      149.                 add_header X-Frame-Options "SAMEORIGIN always";
      150.                 add_header X-Content-Type-Options "nosniff";
      151.  
      152. 		# 转发websocket需要的设置
      153. 		proxy_set_header X-Real_IP $remote_addr;
      154. 		proxy_set_header Host $host;
      155. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      156. 		proxy_http_version 1.1;
      157. 		proxy_set_header Upgrade $http_upgrade;
      158. 		proxy_set_header Connection 'upgrade';
      159. 		location / {
      160. 			proxy_pass http://frontdongmi-official.rz-dt:30001/;
      161. 		}
      162.                 location /pdf_web/ {
      163. 			proxy_pass http://pdfwebserver.rz-dt:30001/pdf_web/;
      164. 		}
      165.                 location /weixinproxy/ {
      166. 			proxy_pass http://weixinproxyserver.rz-dt:30001/;
      167. 		}
      168.                 location /events/ {
      169. 			proxy_pass http://sseserver.rz-dt:30001/events/;
      170. 		}
      171.                 location /public/ {
      172. 			proxy_pass http://sseserver.rz-dt:30001/public/;
      173. 		}
      174.                 location /office_web/ {
      175.                 proxy_set_header X-Real_IP $remote_addr;
      176. 		proxy_set_header Host view.officeapps.live.com;
      177. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      178. 		proxy_http_version 1.1;
      179. 		proxy_set_header Upgrade $http_upgrade;
      180. 		proxy_set_header Connection 'upgrade';
      181. 		proxy_pass https://view.officeapps.live.com/;
      182. 		}
      183.                 location /weapp_esg/ {
      184. 			proxy_pass http://pdfwebserver.rz-dt:30001/weapp_esg/;
      185. 		}
      186.                 location /zhiku/ {
      187. 			proxy_pass http://frontdongmi.rz-dt:30001/zhiku/;
      188.                        #proxy_pass http://frontdongmi-mv-diag.rz-dt:30001/diag/;
      189. 		}
      190.                 location /im/ {
      191. 			proxy_pass http://frontdongmi-zhixin.rz-dt:30001/im/;
      192. 		}
      193.                 location /managePlatForm/ {
      194. 			proxy_pass http://frontdongmi-manager.rz-dt:30001/managePlatForm/;
      195. 		}
      196.                 location /cockpit/ {
      197. 			proxy_pass http://frontdongmi-cockpit.rz-dt:30001/cockpit/;
      198. 		}
      199.                 location /video/ {
      200. 			proxy_pass http://frontdongmi-video.rz-dt:30001/video/;
      201. 		}
      202.                 location /page/ {
      203. 			proxy_pass http://frontdongmi-page.rz-dt:30001/page/;
      204. 		}
      205.                 location /visualization/ {
      206. 			proxy_pass http://frontdongmi-visualization.rz-dt:30001/visualization/;
      207. 		}
      208.                 location /h5/ {
      209. 			proxy_pass http://frontdongmi-h5.rz-dt:30001/h5/;
      210. 		}
      211.                 location /diag/ {
      212. 			proxy_pass http://frontdongmi-mv-diag.rz-dt:30001/diag/;
      213. 		} 
      214.                 location /h5_weApp/ {
      215. 			proxy_pass http://frontdongmi-h5-weapp.rz-dt:30001/h5_weApp/;
      216. 		}
      217.                 location /eSign/ {
      218. 			proxy_pass http://frontdongmi-esign.rz-dt:30001/eSign/;
      219.                 }
      220.                 location /esign-h5/ {
      221. 			proxy_pass http://frontdongmi-esign-h5.rz-dt:30001/esign-h5/;
      222. 		}
      223.                 location /m/ {
      224. 			proxy_pass http://frontdongmi-h5.rz-dt:30001/m/;
      225. 		}
      226.                 location /marketData/ {
      227.                         proxy_pass http://frontdongmi-marketdata.rz-dt:30001/marketData/;
      228.                 }
      229.                 location /weixin/ {
      230. 			proxy_pass http://ossaccessserver.rz-dt:30002/weixin/;
      231.                 }
      232.                 location /.well-known/ {
      233. 			proxy_pass http://ossaccessserver.rz-dt:30002/.well-known/;
      234.                 }
      235.                 location /getStsToken/ {
      236. 			client_max_body_size 1024M;
      237. 			client_body_buffer_size 1024M;
      238. 			proxy_pass http://fileserver.rz-dt:30001/getStsToken/;
      239.                 }
      240.                 location /rzgateway/ {
      241.                         client_max_body_size 1024M;
      242.                         client_body_buffer_size 1024M;
      243. 			#proxy_pass http://47.101.207.23:8082/;
      244.                         proxy_pass http://application-gateway.rz-dt:8080/;
      245. 		}
      246.                 location /rzwebgateway/ {
      247. add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
      248. 			add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
      249.  
      250. 			if ($request_method = 'OPTIONS') {
      251. 				return 200;
      252. 			}
      253.                         client_max_body_size 1024M;
      254.                         client_body_buffer_size 1024M;
      255.                         proxy_pass http://realize-gateway.rz-dt:9300/;
      256. 		}
      257.                 location /gateway/ {
      258.                        proxy_set_header Connection 'keep-alive';
      259. 			proxy_pass http://gatewayserver.rz-dt:30001/;
      260. 		}
      261. 		location /upload/ {
      262. 			client_max_body_size 1024M;
      263. 			client_body_buffer_size 1024M;
      264. 			proxy_pass http://fileserver.rz-dt:30001/upload/;
      265. 		}
      266.                 location /getPreviewUrl/ {
      267. 			client_max_body_size 1024M;
      268. 			client_body_buffer_size 1024M;
      269. 			proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/;
      270. 		}
      271. 		location /upload_esign/ {
      272. 			client_max_body_size 1024M;
      273. 			client_body_buffer_size 1024M;
      274. 			proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign;
      275. 		}
      276. 		location /download/ {
      277. 			proxy_pass http://fileserver.rz-dt:30001/download/;
      278. 		}
      279. 		location /fdd_notify/ {
      280. 			proxy_pass http://electroniccbpythonserver.rz-dt:30001/;
      281. 		}
      282.  
      283.                 location /qiyu_notify/ {
      284. 	            proxy_pass http://electroniccbpythonserver.rz-dt:30001/;
      285.                 }
      286. 		access_log /var/log/nginx/zhi.real.com.log;
      287. 	}
      288.  
      289.         # 智库web端v1
      290. 	server
      291. 	{
      292. 		listen 30006;
      293. 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      294.                 #add_header Content-Security-Policy "default-src 'self' http://zhi.real.com; font-src 'self' data:; script-src unsafe-inline; script-src-elem unsafe-inline";
      295.                 add_header X-XSS-Protection "1; mode=block";
      296.                 add_header X-Frame-Options "SAMEORIGIN always";
      297.                 add_header X-Content-Type-Options "nosniff";
      298.  
      299. 		# 转发websocket需要的设置
      300. 		proxy_set_header X-Real_IP $remote_addr;
      301. 		proxy_set_header Host $host;
      302. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      303. 		proxy_http_version 1.1;
      304. 		proxy_set_header Upgrade $http_upgrade;
      305. 		proxy_set_header Connection 'upgrade';
      306. 		location / {
      307. 			proxy_pass http://frontdongmi-official-v1.rz-dt:30001/;
      308. 		}
      309.                 location /pdf_web/ {
      310. 			proxy_pass http://pdfwebserver.rz-dt:30001/pdf_web/;
      311. 		}
      312.                 location /weapp_esg/ {
      313. 			proxy_pass http://pdfwebserver.rz-dt:30001/weapp_esg/;
      314. 		}
      315.                 location /zhiku/ {
      316. 			proxy_pass http://frontdongmi-v1.rz-dt:30001/zhiku/;
      317. 		}
      318.                 location /managePlatForm/ {
      319. 			proxy_pass http://frontdongmi-manager.rz-dt:30001/managePlatForm/;
      320. 		}
      321.                 location /video/ {
      322. 			proxy_pass http://frontdongmi-video.rz-dt:30001/video/;
      323. 		}
      324.                 location /page/ {
      325. 			proxy_pass http://frontdongmi-page.rz-dt:30001/page/;
      326. 		}
      327.                 location /visualization/ {
      328. 			proxy_pass http://frontdongmi-visualization.rz-dt:30001/visualization/;
      329. 		}
      330.                 location /h5/ {
      331. 			proxy_pass http://frontdongmi-h5.rz-dt:30001/h5/;
      332. 		}
      333.                 location /h5_weApp/ {
      334. 			proxy_pass http://frontdongmi-h5-weapp.rz-dt:30001/h5_weApp/;
      335. 		}
      336.                 location /m/ {
      337. 			proxy_pass http://frontdongmi-h5.rz-dt:30001/m/;
      338. 		}
      339.                 location /marketData/ {
      340.                         proxy_pass http://frontdongmi-marketdata.rz-dt:30001/marketData/;
      341.                 }
      342.                 location /weixin/ {
      343. 			proxy_pass http://ossaccessserver.rz-dt:30002/weixin/;
      344.                 }
      345.                 location /.well-known/ {
      346. 			proxy_pass http://ossaccessserver.rz-dt:30002/.well-known/;
      347.                 }
      348.                 location /getStsToken/ {
      349. 			client_max_body_size 1024M;
      350. 			client_body_buffer_size 1024M;
      351. 			proxy_pass http://fileserver.rz-dt:30001/getStsToken/;
      352.                 }
      353.                 location /rzgateway/ {
      354.                         client_max_body_size 1024M;
      355.                         client_body_buffer_size 1024M;
      356. 			#proxy_pass http://47.101.207.23:8082/;
      357.                         #proxy_pass http://139.224.134.101:8082/;
      358.                         proxy_pass http://application-gateway.rz-dt:8080/;
      359. 		}
      360.                 location /rzwebgateway/ {
      361. add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
      362. 			add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
      363.  
      364. 			if ($request_method = 'OPTIONS') {
      365. 				return 200;
      366. 			}
      367.                         client_max_body_size 1024M;
      368.                         client_body_buffer_size 1024M;
      369.                         proxy_pass http://realize-gateway.rz-dt:9300/;
      370. 		}
      371.                 location /gateway/ {
      372.                        proxy_set_header Connection 'keep-alive';
      373. 			proxy_pass http://gatewayserver.rz-dt:30001/;
      374. 		}
      375. 		location /upload/ {
      376. 			client_max_body_size 1024M;
      377. 			client_body_buffer_size 1024M;
      378. 			proxy_pass http://fileserver.rz-dt:30001/upload/;
      379. 		}
      380.                 location /getPreviewUrl/ {
      381. 			client_max_body_size 1024M;
      382. 			client_body_buffer_size 1024M;
      383. 			proxy_pass http://fileserver.rz-dt:30001/getPreviewUrl/;
      384. 		}
      385. 		location /upload_esign/ {
      386. 			client_max_body_size 1024M;
      387. 			client_body_buffer_size 1024M;
      388. 			proxy_pass http://electronicpythonserver.rz-dt:30001/upload_esign;
      389. 		}
      390. 		location /download/ {
      391. 			proxy_pass http://fileserver.rz-dt:30001/download/;
      392. 		}
      393. 		location /fdd_notify/ {
      394. 			proxy_pass http://electroniccbpythonserver.rz-dt:30001/;
      395. 		}
      396. 		access_log /var/log/nginx/zhiku-v1.zhi.real.com.log;
      397. 	}
      398. 	
      399. 	# 荣正网关
      400. 	server
      401. 	{
      402. 		listen 30003;
      403. 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      404. 		# 转发websocket需要的设置
      405. 		proxy_set_header X-Real_IP $remote_addr;
      406. 		proxy_set_header Host $host;
      407. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      408. 		proxy_http_version 1.1;
      409. 		proxy_set_header Upgrade $http_upgrade;
      410. 		proxy_set_header Connection 'upgrade';
      411. 		location / {
      412. 			client_max_body_size 1024M;
      413. 			client_body_buffer_size 1024M;
      414.                         proxy_pass http://realize-auth.rz-dt:9301/;
      415. 		}
      416. 		access_log /var/log/nginx/rzgateway.zhi.real.com.log;
      417. 	}
      418.  
      419.         # 采集平台
      420. server
      421. {
      422.     listen 30004;
      423.     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      424.     # 转发websocket需要的设置
      425.     proxy_set_header X-Real_IP $remote_addr;
      426.     proxy_set_header Host $host;
      427.     proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      428.     proxy_http_version 1.1;
      429.     proxy_set_header Upgrade $http_upgrade;
      430.     proxy_set_header Connection 'upgrade';
      431.     location / {
      432.         proxy_pass http://spiderflow.rz-dt:30001/;
      433.     }
      434.     access_log /var/log/nginx/spider.zhi.real.com.log;
      435. }
      436.  
      437.     # 视频营销
      438. 	server
      439. 	{
      440. 		listen 30005;
      441. 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      442. 		# 转发websocket需要的设置
      443. 		proxy_set_header X-Real_IP $remote_addr;
      444. 		proxy_set_header Host idtcdn.oss-cn-hangzhou.aliyuncs.com;
      445. 		proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      446. 		proxy_http_version 1.1;
      447. 		proxy_set_header Upgrade $http_upgrade;
      448. 		proxy_set_header Connection 'upgrade';
      449. 		location / {
      450. 			proxy_pass http://idtcdn.oss-cn-hangzhou.aliyuncs.com/;
      451. 		}
      452. 		access_log /var/log/nginx/video.zhi.real.com.log;
      453. 	}
      454.  
      455.     # 文件服务
      456.     server
      457.     {
      458. 	listen 30007;
      459. 	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
      460. 	proxy_set_header X-Real_IP $remote_addr;
      461. 	proxy_set_header Host $host;
      462. 	proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
      463. 	proxy_http_version 1.1;
      464. 	proxy_set_header Upgrade $http_upgrade;
      465. 	proxy_set_header Connection 'upgrade';
      466. 	location / {
      467.             client_max_body_size 50M;
      468.             client_body_buffer_size 50M;
      469. 	    proxy_pass http://fileserver.rz-dt:30001/;
      470. 	}
      471. 	access_log /var/log/nginx/file.zhi.real.com.log;
      472.     }
      473. }

  • 相关阅读:
    Stable Diffusion之novel Ai教程，小白必经之路
    B站：TED-ED 世界人文历史英文动画100集【双语字幕】（第1集）
    【数据结构】二叉搜索树，AVL树，2-3树，红黑树、B树B+树简单笔记
    typeof的作用
    DNS域名解析服务
    Python搭配GBase 8s
    网络安全里主要的岗位有哪些？小白如何快速入门学习黑客？
    JUC-同步
    计算机毕业设计Javaweb唐院寻人表白系统（源码+系统+mysql数据库+lw文档）
    vue中实现百度地图全国与省市地图切换
  • 原文地址：https://blog.csdn.net/xiaogg3678/article/details/139630691