nginx允许跨域和websocket支持

最新推荐文章于 2025-06-04 19:58:49 发布

格林-scorpio

最新推荐文章于 2025-06-04 19:58:49 发布

阅读量1k

点赞数

CC 4.0 BY-SA版权

分类专栏： nginx

本文链接：https://blog.youkuaiyun.com/pengwupeng2008/article/details/118719606

nginx 专栏收录该内容

5 篇文章

订阅专栏

本文详细解读了如何在Nginx配置中实现HTTPS监听，包括SSL证书设置、跨域访问控制和代理到后端服务器。重点介绍了location块中的代理配置和安全性优化措施。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

路径 nginx/conf/conf.d/my_test.conf

server {
        listen       443;
        server_name  wlres.cssccloud.net;
        server_name_in_redirect off;
        ssl on;
        root html;
        index index.html index.htm;
        ssl_certificate   cert/mytest.pem;
        ssl_certificate_key  cert/mytest.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;


        access_log  /data/logs/nginx/access.443.log mylog;

	    #允许跨域访问
        add_header  Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
        add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
        if ($request_method = 'OPTIONS') {
                return 204;
        }
        
        location /admin {
             alias /var/www/ui/admin/;
        }
      
        
        location /app {
             alias /var/www/test_app/;
        }
        location /static {
             alias /var/www/ui/app/;
        }

        location / {
            proxy_buffer_size 64k;
            proxy_buffers 4 1024k;
            proxy_busy_buffers_size 2048k;
            proxy_temp_file_write_size 1024m;
            proxy_connect_timeout 300;
            proxy_read_timeout 600;
            proxy_send_timeout 300;
            proxy_headers_hash_max_size 51200;
            proxy_headers_hash_bucket_size 6400;

	       # websocket support
            proxy_http_version 1.1;
       	    proxy_set_header Upgrade $http_upgrade;
	        proxy_set_header Connection "upgrade";
            
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

            proxy_pass  http://127.0.0.1:18000/;
        }


}