diff --git a/docker/nginx/nginx.conf b/docker/nginx/nginx.conf index cd4013bf9..097d72f6a 100644 --- a/docker/nginx/nginx.conf +++ b/docker/nginx/nginx.conf @@ -1,5 +1,8 @@ worker_processes 1; +error_log /var/log/nginx/error.log warn; +pid /var/run/nginx.pid; + events { worker_connections 1024; } @@ -9,6 +12,14 @@ http { default_type application/octet-stream; sendfile on; keepalive_timeout 65; + # 限制body大小 + client_max_body_size 100m; + + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + access_log /var/log/nginx/access.log main; upstream server { server 172.30.0.60:8080; @@ -19,6 +30,19 @@ http { listen 80; server_name localhost; + # https配置参考 start + #listen 443 ssl; + + # 证书直接存放 /docker/nginx/cert/ 目录下即可 更改证书名称即可 无需更改证书路径 + #ssl on; + #ssl_certificate /etc/nginx/cert/xxx.local.crt; # /etc/nginx/cert/ 为docker映射路径 不允许更改 + #ssl_certificate_key /etc/nginx/cert/xxx.local.key; # /etc/nginx/cert/ 为docker映射路径 不允许更改 + #ssl_session_timeout 5m; + #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; + #ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + #ssl_prefer_server_ciphers on; + # https配置参考 end + location / { root /usr/share/nginx/html; try_files $uri $uri/ /index.html;