GithubFollow/One-KVM
1
0
Fork 0
mirror of https://github.com/mofeng-git/One-KVM.git synced 2025-12-12 09:10:30 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

modular nginx configuration

Browse Source
This commit is contained in:
Devaev Maxim 2018-12-15 17:01:23 +03:00
parent d652a02ac9
commit 510300df35
6 changed files with 24 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
PKGBUILD
View File

@ -49,6 +49,7 @@ package() {
cp -r web "$pkgdir/usr/share/kvmd" cp -r web "$pkgdir/usr/share/kvmd"
cp -r extras "$pkgdir/usr/share/kvmd" cp -r extras "$pkgdir/usr/share/kvmd"
cp -r configs "$pkgdir/usr/share/kvmd/configs.default" cp -r configs "$pkgdir/usr/share/kvmd/configs.default"
sed -i -e "s/^#PROD//g" "$pkgdir/usr/share/kvmd/configs.default/nginx/nginx.conf"
find "$pkgdir" -name ".gitignore" -delete find "$pkgdir" -name ".gitignore" -delete
mkdir -p "$pkgdir/etc/kvmd" mkdir -p "$pkgdir/etc/kvmd"

2
configs/nginx/loc-login.conf Normal file
View File

@ -0,0 +1,2 @@
error_page 401 = @login;
error_page 403 = @login;

0
configs/nginx/proxy-params.conf → configs/nginx/loc-proxy.conf
View File

5
configs/nginx/loc-websocket.conf Normal file
View File

@ -0,0 +1,5 @@
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_connect_timeout 7d;
proxy_send_timeout 7d;
proxy_read_timeout 7d;

33
configs/nginx/nginx.conf
View File

@ -4,7 +4,7 @@ worker_processes 4;
# error_log /tmp/nginx.error.log; # error_log /tmp/nginx.error.log;
error_log stderr; error_log stderr;
include /usr/share/kvmd/extras/*/nginx.main-ctx.conf; include /usr/share/kvmd/extras/*/nginx.ctx-main.conf;
events { events {
worker_connections 1024; worker_connections 1024;
@ -42,7 +42,7 @@ http {
server 127.0.0.1:8082 fail_timeout=0s max_fails=0; server 127.0.0.1:8082 fail_timeout=0s max_fails=0;
} }
include /usr/share/kvmd/extras/*/nginx.http-ctx.conf; include /usr/share/kvmd/extras/*/nginx.ctx-http.conf;
#PROD server { #PROD server {
#PROD listen 80; #PROD listen 80;
@ -53,13 +53,7 @@ http {
server { server {
#PROD listen 443 ssl http2; #PROD listen 443 ssl http2;
server_name localhost; server_name localhost;
#PROD include /etc/nginx/ssl.conf;
#PROD ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#PROD ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
#PROD ssl_certificate /etc/nginx/ssl/server.crt;
#PROD ssl_certificate_key /etc/nginx/ssl/server.key;
#PROD add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
auth_request /auth; auth_request /auth;
@ -73,8 +67,7 @@ http {
location / { location / {
root /usr/share/kvmd/web; root /usr/share/kvmd/web;
error_page 401 = @login; include /etc/nginx/loc-login.conf;
error_page 403 = @login;
} }
location @login { location @login {
@ -105,12 +98,8 @@ http {
rewrite ^/kvmd/ws$ /ws break; rewrite ^/kvmd/ws$ /ws break;
rewrite ^/kvmd/ws\?(.*)$ /ws?$1 break; rewrite ^/kvmd/ws\?(.*)$ /ws?$1 break;
proxy_pass http://kvmd; proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf; include /etc/nginx/loc-proxy.conf;
proxy_set_header Upgrade $http_upgrade; include /etc/nginx/loc-websocket.conf;
proxy_set_header Connection "upgrade";
proxy_connect_timeout 7d;
proxy_send_timeout 7d;
proxy_read_timeout 7d;
auth_request off; auth_request off;
} }
@ -118,7 +107,7 @@ http {
rewrite ^/kvmd/msd/write$ /msd/write break; rewrite ^/kvmd/msd/write$ /msd/write break;
rewrite ^/kvmd/msd/write\?(.*)$ /msd/write?$1 break; rewrite ^/kvmd/msd/write\?(.*)$ /msd/write?$1 break;
proxy_pass http://kvmd; proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf; include /etc/nginx/loc-proxy.conf;
limit_rate 6250k; limit_rate 6250k;
limit_rate_after 50k; limit_rate_after 50k;
client_max_body_size 0; client_max_body_size 0;
@ -130,7 +119,7 @@ http {
rewrite ^/kvmd/log$ /log break; rewrite ^/kvmd/log$ /log break;
rewrite ^/kvmd/log\?(.*)$ /log?$1 break; rewrite ^/kvmd/log\?(.*)$ /log?$1 break;
proxy_pass http://kvmd; proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf; include /etc/nginx/loc-proxy.conf;
proxy_read_timeout 7d; proxy_read_timeout 7d;
postpone_output 0; postpone_output 0;
proxy_buffering off; proxy_buffering off;
@ -142,7 +131,7 @@ http {
rewrite ^/kvmd$ / break; rewrite ^/kvmd$ / break;
rewrite ^/kvmd/(.*)$ /$1 break; rewrite ^/kvmd/(.*)$ /$1 break;
proxy_pass http://kvmd; proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf; include /etc/nginx/loc-proxy.conf;
auth_request off; auth_request off;
} }
@ -151,12 +140,12 @@ http {
rewrite ^/streamer\?(.*)$ ?$1 break; rewrite ^/streamer\?(.*)$ ?$1 break;
rewrite ^/streamer/(.*)$ /$1 break; rewrite ^/streamer/(.*)$ /$1 break;
proxy_pass http://ustreamer; proxy_pass http://ustreamer;
include /etc/nginx/proxy-params.conf; include /etc/nginx/loc-proxy.conf;
postpone_output 0; postpone_output 0;
proxy_buffering off; proxy_buffering off;
proxy_ignore_headers X-Accel-Buffering; proxy_ignore_headers X-Accel-Buffering;
} }
include /usr/share/kvmd/extras/*/nginx.server-ctx.conf; include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
} }
} }

5
configs/nginx/ssl.conf Normal file
View File

@ -0,0 +1,5 @@
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;