域名server 配置實現test-im.xxx.cn, 修改nginx配置文件:
- vim /usr/local/nginx/conf/nginx.conf
- 在 http { ... } 文件中添 include /usr/local/nginx/vhost/*.conf;
http {
include mime.types;
default_type application/octet-stream;
## 加入下面這一行,
include /usr/local/nginx/vhost/*.conf;
- 在nginx 對應路徑創建引用文件目錄 mkdir -p /usr/local/nginx/vhost/
- 將下面內容在此文件下面,創建以test-im.xxx.cn.conf文件;
# websocket 配置實現依懶
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
upstream im_http_name{
server 127.0.0.1:9010 weight=1;
}
upstream im_socket_name{
server 127.0.0.1:9020 weight=1;
}
upstream im_file_name{
server 127.0.0.1:9030 weight=1;
}
upstream wss_name{
server 127.0.0.1:9326;
}
server
{
listen 80;
server_name test-im.xxx.cn , test-im-file.xxx.cn, test-ws.xxx.cn; # 多域名以","分隔
# index index.jsp;
client_max_body_size 1000m;
client_header_timeout 10m;
client_body_timeout 10m;
proxy_connect_timeout 60000s;
proxy_read_timeout 10m;
proxy_send_timeout 10m;
location ~/im/user/ {
proxy_pass http://im_http_name;
}
location ~/im/oauth/ {
proxy_pass http://im_http_name;
}
location ~/im/api/ {
proxy_pass http://im_socket_name;
}
location ~/im/upload/ {
proxy_pass http://im_file_name;
}
# websocket 配置實現
location /im/ws {
proxy_pass http://wss_name;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
# proxy_set_header X-NginX-Proxy true;
# proxy_set_header Host $host;
# proxy_set_header Http-Host $http_host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header REMOTE-HOST $remote_addr;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
# access_log /usr/local/nginx/logs/im-test.log main;
location /{
root /data/service/im-vue/;
index index.html index.htm;
}
location ~/im-vue.*\.(html|gif|jpg|jpeg|png|bmp|swf|css|js|eot|svg|ttf|woff|woff2|properties|json)$ {
root /data/service/;
index index.html index.htm;
if (-f $request_filename) {
expires 1d;
break;
}
}
## docs.html rewrite
location ~/http-im/ {
proxy_pass http://127.0.0.1:9010;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 2;
proxy_read_timeout 50;
rewrite "^/http-im/(.*)$" /im/$1 break;
}
location /ws-im/ {
proxy_pass http://127.0.0.1:9020;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 2;
proxy_read_timeout 50;
rewrite "^/ws-im/(.*)$" /im/$1 break;
}
location ~/file-im/ {
proxy_pass http://127.0.0.1:9030;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_connect_timeout 2;
proxy_read_timeout 50;
rewrite "^/file-im/(.*)$" /im/$1 break;
}
}
## https 配置如果沒有https 證書,下面可以刪除
## ==========================
server {
listen 443 ssl;
#配置HTTPS的默認訪問端口爲443。
#如果未在此處配置HTTPS的默認訪問端口,可能會造成Nginx無法啓動。
#如果您使用Nginx 1.15.0及以上版本,請使用listen 443 ssl代替listen 443和ssl on。
server_name test-im.xxx.cn; #需要將yourdomain.com替換成證書綁定的域名。
root html;
index index.html index.htm;
ssl_certificate cert/test-im.xxx.cn.pem; #需要將cert-file-name.pem替換成已上傳的證書文件的名稱。
ssl_certificate_key cert/test-im.xxx.cn.key; #需要將cert-file-name.key替換成已上傳的證書密鑰文件的名稱。
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
#表示使用的加密套件的類型。
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #表示使用的TLS協議的類型。
ssl_prefer_server_ciphers on;
location ~/im/api/ {
proxy_pass http://im_socket_name;
}
location ~/im/upload/ {
proxy_pass http://im_file_name;
}
}
## https ==========================