1panel超简单nginx反代各种docker registry

鸡不择食

emily1218 发表于 2024-6-13 22:34
大佬能发一份完整配置不 咋保存都是报错

1. server {
   
2.     listen 80 ;
   
3.     listen [::]:80 ;
   
4.     listen 443 ssl http2 ;
   
5.     listen [::]:443 ssl http2 ;
   
6.     server_name cr.j8.work;
   
7.     index index.php index.html index.htm default.php default.htm default.html;
   
8.     proxy_set_header Host $host;
   
9.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   
10.     proxy_set_header X-Forwarded-Host $server_name;
    
11.     proxy_set_header X-Real-IP $remote_addr;
    
12.     proxy_http_version 1.1;
    
13.     proxy_set_header Upgrade $http_upgrade;
    
14.     proxy_set_header Connection "upgrade";
    
15.     access_log /www/sites/cr/log/access.log;
    
16.     error_log /www/sites/cr/log/error.log;
    
17.    
    
18. 
    
19.     location ^~ /.well-known/acme-challenge {
    
20.         allow all;
    
21.         root /usr/share/nginx/html;
    
22.     }
    
23.     include /www/sites/cr/proxy/*.conf;
    
24.     ssl_certificate /www/sites/cr/ssl/fullchain.pem;
    
25.     ssl_certificate_key /www/sites/cr/ssl/privkey.pem;
    
26.     ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1;
    
27.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    
28.     ssl_prefer_server_ciphers on;
    
29.     ssl_session_cache shared:SSL:10m;
    
30.     ssl_session_timeout 10m;
    
31.     add_header Strict-Transport-Security "max-age=31536000";
    
32.     error_page 497 https://$host$request_uri;
    
33.     proxy_set_header X-Forwarded-Proto https;
    
34.     ssl_stapling on;
    
35.     ssl_stapling_verify on;
    
36.     if ($scheme = http) {
    
37.         return 301 https://$host$request_uri;
    
38.     }
    
39.    
    
40.     rewrite_log on;  # 开启 rewrite 日志
    
41.    
    
42. 
    
43.     # 优先级最低
    
44.     location / {
    
45.         
    
46.         proxy_pass https://registry-1.docker.io; # Docker Hub 的官方镜像仓库
    
47.         proxy_set_header Host registry-1.docker.io;
    
48.         proxy_set_header X-Real-IP $remote_addr;
    
49.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
50.         proxy_set_header X-Forwarded-Proto $scheme;
    
51.         # 关闭缓存
    
52.         proxy_buffering off;
    
53.         # 转发认证相关的头部
    
54.         proxy_set_header Authorization $http_authorization;
    
55.         proxy_pass_header Authorization;
    
56.         # 对 upstream 状态码检查，实现 error_page 错误重定向
    
57.         proxy_intercept_errors on;
    
58.         # error_page 指令默认只检查了第一次后端返回的状态码，开启后可以跟随多次重定向。
    
59.         recursive_error_pages on;
    
60.         # 根据状态码执行对应操作，以下为301、302、307状态码都会触发
    
61.         #error_page 301 302 307 = @handle_redirect;
    
62.         error_page 429 = @handle_too_many_requests;
    
63.     }
    
64.     #处理重定向
    
65.     location @handle_redirect {
    
66.         resolver 1.1.1.1;
    
67.         set $saved_redirect_location '$upstream_http_location';
    
68.         proxy_pass $saved_redirect_location;
    
69.     }
    
70.     # 处理429错误
    
71.     location @handle_too_many_requests {
    
72.         #proxy_set_header Host cfcr.j8.work;  # Worker设置的域名
    
73.         #proxy_pass http://cfcr.j8.work; # Worker设置的域名
    
74.         #proxy_set_header Host $http_host;
    
75.     }
    
76. }
    
77. 
    
78. 
    

复制代码

Renzheng

谢谢分享