k8swebapi-nginx.conf 1.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. upstream sharetransmit-svc {
  2. server sharetransmit-svc:8006;
  3. }
  4. server {
  5. listen 80;
  6. listen 443 ssl http2;
  7. #ssl on;
  8. ssl_certificate ssl/jixiang.cn.pem;
  9. ssl_certificate_key ssl/jixiang.cn.key;
  10. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  11. ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
  12. ssl_prefer_server_ciphers on;
  13. ssl_session_timeout 5m;
  14. add_header Access-Control-Allow-Origin *;
  15. add_header Access-Control-Allow-Headers X-Requested-With;
  16. add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
  17. charset utf-8;
  18. server_name jinit1.jixiang.cn jinit2.jixiang.cn jinit3.jixiang.cn jinittest.jixiang.cn;
  19. location / {
  20. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  21. proxy_set_header Remote_addr $remote_addr;
  22. proxy_set_header X-Real_IP $remote_addr;
  23. proxy_set_header Host $host;
  24. proxy_redirect off;
  25. proxy_http_version 1.1;
  26. proxy_pass http://sharetransmit-svc;
  27. }
  28. location /favicon.ico {
  29. log_not_found off;
  30. access_log off;
  31. }
  32. }