203 lines
7.4 KiB
Plaintext
203 lines
7.4 KiB
Plaintext
upstream demo_k8s_cluster {
|
|
ip_hash;
|
|
server 192.168.35.45:30500;
|
|
server 192.168.34.247:30500;
|
|
server 192.168.34.248:30500;
|
|
server 192.168.34.234:30500;
|
|
server 192.168.34.238:30500;
|
|
}
|
|
#server {
|
|
# listen 18000 ssl;
|
|
# include /etc/nginx/conf.d/ssl_settings/ssl-x-demo-uavcmlc.conf;
|
|
# server_name demo.uavcmlc.com;
|
|
# rewrite ^(.*)$ https://www.demo.uavcmlc.com:18000$1 permanent;
|
|
# error_page 497 301 https://www.demo.uavcmlc.com:18000$1;
|
|
#}
|
|
server {
|
|
listen 18000 ssl default_server;
|
|
listen 443 ssl default_server;
|
|
include /etc/nginx/conf.d/ssl_settings/ssl-x-demo-uavcmlc.conf;
|
|
include /etc/nginx/conf.d/ssl_settings/error.conf;
|
|
server_name _ www.demo.uavcmlc.com ;
|
|
deny 117.173.25.92;
|
|
|
|
#add_header X-Xss-Protection 1;
|
|
#add_header X-Xss-Protection "mod=block";
|
|
#add_header X-Content-Type-Options "nosniff";
|
|
#add_header Content-Security-Policy "'default-src' 'self'";
|
|
#add_header strict-transport-security "max-age=31536000; includeSubDomains; preload";
|
|
#add_header Referrer-Policy "strict-origin-when-cross-origin";
|
|
#add_header X-Permitted-Cross-Domain-Policies all;
|
|
#add_header X-Download-Options "noopen" always;
|
|
#add_header X-Frame-Options "DENY";
|
|
|
|
location /MP_verify_iJt8t97EPTfpp7gN.txt {
|
|
alias /MP/MP_verify_iJt8t97EPTfpp7gN.txt;
|
|
}
|
|
location /inner/ {
|
|
#allow 183.220.149.19/32;
|
|
allow 192.168.0.0/16;
|
|
deny all;
|
|
|
|
client_max_body_size 5120m;
|
|
client_body_buffer_size 5120m;
|
|
client_body_timeout 6000s;
|
|
proxy_send_timeout 10000s;
|
|
proxy_read_timeout 10000s;
|
|
proxy_connect_timeout 600s;
|
|
proxy_max_temp_file_size 5120m;
|
|
proxy_request_buffering on;
|
|
proxy_buffering off;
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 12k;
|
|
proxy_set_header Host 'www.demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_pass http://192.168.34.234:39745/;
|
|
}
|
|
|
|
location /oms/api/ {
|
|
proxy_pass http://192.168.34.234:39888/;
|
|
client_max_body_size 5120m;
|
|
client_body_buffer_size 5120m;
|
|
client_body_timeout 6000s;
|
|
proxy_send_timeout 10000s;
|
|
proxy_read_timeout 10000s;
|
|
proxy_connect_timeout 600s;
|
|
proxy_max_temp_file_size 5120m;
|
|
proxy_request_buffering on;
|
|
proxy_buffering off;
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 12k;
|
|
proxy_set_header Host 'www.demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
allow 183.220.149.19;
|
|
allow 192.168.0.0/16;
|
|
deny all;
|
|
}
|
|
location /oms/ {
|
|
proxy_pass http://192.168.34.234:39528/;
|
|
client_max_body_size 5120m;
|
|
client_body_buffer_size 5120m;
|
|
client_body_timeout 6000s;
|
|
proxy_send_timeout 10000s;
|
|
proxy_read_timeout 10000s;
|
|
proxy_connect_timeout 600s;
|
|
proxy_max_temp_file_size 5120m;
|
|
proxy_request_buffering on;
|
|
proxy_buffering off;
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 12k;
|
|
proxy_set_header Host 'www.demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
allow 183.220.149.19;
|
|
allow 192.168.0.0/16;
|
|
deny all;
|
|
}
|
|
|
|
|
|
location / {
|
|
sub_filter 'demo.uavcmlc.com:18000' 'demo.uavcmlc.com:443';
|
|
sub_filter_once off;
|
|
sub_filter_types application/vnd.apple.mpegurl;
|
|
|
|
proxy_pass http://demo_k8s_cluster/;
|
|
client_max_body_size 5120m;
|
|
client_body_buffer_size 5120m;
|
|
client_body_timeout 6000s;
|
|
proxy_send_timeout 10000s;
|
|
proxy_read_timeout 10000s;
|
|
proxy_connect_timeout 600s;
|
|
proxy_max_temp_file_size 5120m;
|
|
proxy_request_buffering on;
|
|
proxy_buffering off;
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 4 12k;
|
|
proxy_set_header Host 'www.demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
# location /api/mqtts/ {
|
|
# proxy_pass http://cmii-uav-mqtthandler.uavcloud-demo.io:30500/uav/uavInfo/;
|
|
# }
|
|
|
|
# location /api/mqtt_wss/ {
|
|
# #通过配置端口指向部署websocker的项目
|
|
# proxy_pass http://192.168.34.234:54544/mqtt;
|
|
# proxy_set_header Sec-WebSocket-Protocol mqtt;
|
|
# proxy_http_version 1.1;
|
|
# proxy_set_header Upgrade $http_upgrade;
|
|
# proxy_set_header Connection "Upgrade";
|
|
# proxy_set_header X-real-ip $remote_addr;
|
|
# proxy_set_header X-Forwarded-For $remote_addr;
|
|
# }
|
|
#location /_AMapService/v4/map/styles {
|
|
# set $args "$args&jscode=cf66cea95bdcdfcf8048456b36f357a1";
|
|
# proxy_pass https://webapi.amap.com/v4/ap/styles;
|
|
#}
|
|
#location /_AMapService/v3/log/ {
|
|
# deny all;
|
|
#}
|
|
#location /_AMapService/ {
|
|
# set $args "$args&jscode=cf66cea95bdcdfcf8048456b36f357a1";
|
|
# proxy_pass https://restapi.amap.com/;
|
|
#}
|
|
# location /api/cloudLive/public/video/playback/manage/playM3u8 {
|
|
# proxy_hide_header Content-type;
|
|
# add_header Content-Type application/vnd.apple.mpegurl;
|
|
# #proxy_set_header Content-Type application/vnd.apple.mpegurl;
|
|
# proxy_set_header Host $host;
|
|
# proxy_pass http://demo_k8s_cluster/api/cloudLive/public/video/playback/manage/playM3u8;
|
|
# }
|
|
|
|
|
|
location ~ ^/.*/(actuator|swagger-resources|api-docs|env|ping|health)(/|$) {
|
|
return 403;
|
|
}
|
|
|
|
location /rtc/v1/ {
|
|
proxy_set_header Host 'helm-live.ig-demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_pass http://demo_k8s_cluster/rtc/v1/;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 18000 ssl;
|
|
listen 443 ssl;
|
|
include /etc/nginx/conf.d/ssl_settings/ssl-x-demo-uavcmlc.conf;
|
|
include /etc/nginx/conf.d/ssl_settings/error.conf;
|
|
server_name live.demo.uavcmlc.com;
|
|
|
|
location / {
|
|
proxy_set_header Host 'helm-live.ig-demo.uavcmlc.com';
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_pass http://demo_k8s_cluster;
|
|
}
|
|
#location /rtc/v1/ {
|
|
# proxy_pass http://192.168.34.236:35985/rtc/v1/;
|
|
#}
|
|
location /v2/models/GroundingDINO/infer {
|
|
proxy_pass http://192.168.34.227:39900/v2/models/GroundingDINO/infer;
|
|
}
|
|
}
|