From 5eff9a50b63c5c7987b1f93534996d2d7a37189b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=96=AF=E7=8B=82=E7=9A=84=E7=8B=AE=E5=AD=90Li?=
 <15040126243@163.com>
Date: Mon, 27 Jun 2022 23:02:20 +0800
Subject: [PATCH] =?UTF-8?q?update=20=E4=BC=98=E5=8C=96=20nginx=20=E9=99=90?=
 =?UTF-8?q?=E5=88=B6=E5=A4=96=E7=BD=91=E8=AE=BF=E9=97=AE=E5=86=85=E7=BD=91?=
 =?UTF-8?q?=20actuator=20=E7=9B=B8=E5=85=B3=E8=B7=AF=E5=BE=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 script/docker/nginx/nginx.conf | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/script/docker/nginx/nginx.conf b/script/docker/nginx/nginx.conf
index 07df78391..daa2acf49 100644
--- a/script/docker/nginx/nginx.conf
+++ b/script/docker/nginx/nginx.conf
@@ -23,16 +23,16 @@ http {
 
     upstream server {
         ip_hash;
-        server 172.30.0.60:8080;
-        server 172.30.0.61:8080;
+        server 127.0.0.1:8080;
+        server 127.0.0.1:8080;
     }
 
     upstream monitor-admin {
-        server 172.30.0.90:9090;
+        server 127.0.0.1:9090;
     }
 
     upstream xxljob-admin {
-        server 172.30.0.92:9100;
+        server 127.0.0.1:9100;
     }
 
     server {
@@ -62,6 +62,11 @@ http {
         #     return 200 '{"msg":"演示模式，不允许操作","code":500}';
         # }
 
+        # 限制外网访问内网 actuator 相关路径
+        location ~ ^(/[^/]*)?/actuator(/.*)?$ {
+            return 403;
+        }
+
         location / {
             root   /usr/share/nginx/html;
             try_files $uri $uri/ /index.html;