大量更新

2-NGINX相关/107421.xyz/21-申请证书.sh

@@ -15,9 +15,10 @@ export DOMAIN_NAME=xx.p2.vl.s4.107421.xyz
 
 # seoul-arm-01
 export DOMAIN_NAME=dify.107421.xyz
+# seoul-arm-01
+export DOMAIN_NAME=pan.107421.xyz
 
-
-export CF_Token="oXJRP5XI8Zhipa_PtYtB_jy6qWL0I9BosrJEYE8p"
+export CF_Token="y-OqT1Gan37vBUC1YaedmkKbsH6Kf84RH6Ve2b5x"
 export CF_Account_ID="dfaadeb83406ef5ad35da02617af9191"
 export CF_Zone_ID="511894a4f1357feb905e974e16241ebb"
 
@@ -28,4 +29,4 @@ acme.sh --install-cert -d ${DOMAIN_NAME} --ecc \
 --fullchain-file /etc/nginx/conf.d/ssl_key/${DOMAIN_NAME}.cert.pem \
 --reloadcmd     "systemctl restart nginx --force"
 
-acme.sh --renew -d xx.t2.ll.c0.107421.xyz --ecc
+acme.sh --renew -d ${DOMAIN_NAME}--ecc

2-NGINX相关/nginx安装/80转443模板.conf

@@ -0,0 +1,30 @@
+server {
+    listen 80;
+    server_name yourdomain.com;
+
+    # 强制将所有HTTP请求重定向到HTTPS
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name yourdomain.com;
+
+    # SSL配置
+    ssl_certificate /path/to/your/certificate.crt;
+    ssl_certificate_key /path/to/your/private.key;
+
+    # 其他SSL配置（可选）
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    # 处理所有URI
+    location / {
+        # 你的后端服务配置
+        proxy_pass http://your_backend_server;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

2-NGINX相关/nginx安装/test.conf

@@ -0,0 +1,49 @@
+server {
+    listen 80;
+    server_name heshun-admin.doublecheer.com;
+
+    # 强制将所有HTTP请求重定向到HTTPS
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name heshun-admin.doublecheer.com;
+
+    # SSL配置
+    ssl_certificate /path/to/your/certificate.crt;
+    ssl_certificate_key /path/to/your/private.key;
+
+    # 其他SSL配置（可选）
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    # 处理所有URI
+    location / {
+        root /home/hs/web/platform;
+        index index.html index.htm;
+        try_files $uri $uri/ @router;
+    }
+
+    location /prod-api/ {
+        rewrite ^/prod-api/(.*) /$1 break;
+        #两个反斜杆
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_pass http://127.0.0.1:30700;
+    }
+    location /play-api/ {
+        rewrite ^/play-api/(.*) /$1 break;
+        #两个反斜杆
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_pass http://127.0.0.1:30720;
+    }
+    location @router {
+        rewrite ^.*$ /index.html last;
+    }
+}