add blockip.conf

2025-10-04 19:15:13 +08:00
parent 7248dd92c1
commit c64b5ec28c
1 changed files with 146 additions and 147 deletions
--- a/nginx.conf
+++ b/nginx.conf
@@ -1,198 +1,197 @@
-worker_processes 1; # 设置工作进程数
+# 全局配置优化
+worker_processes auto; # 自动根据CPU核心数设置工作进程
+worker_cpu_affinity auto; # CPU亲和性，提高缓存命中率
+worker_rlimit_nofile 65535; # 每个worker进程能打开的文件描述符数量
+
+# 错误日志配置
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;

 events {
-worker_connections 1024; # 每个进程的最大连接数
+    worker_connections 4096; # 增加每个进程的最大连接数
+    use epoll; # 使用epoll事件模型（Linux）
+    multi_accept on; # 一个worker同时接受多个新连接
 }
-http{
-    server {
-        listen       8000;
-        server_name  www.stayreal.online;
-        ignore_invalid_headers off;
-        # Allow any size file to be uploaded.
-        # Set to a value such as 1000m; to restrict file size to a specific value
-        client_max_body_size 0;
-        # Disable buffering
-        proxy_buffering off;
-        proxy_request_buffering off;
-        location / {
-            proxy_pass  http://192.168.1.100:8080;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_connect_timeout 300;
-            # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
-            proxy_http_version 1.1;
-            proxy_set_header Connection "";
-            chunked_transfer_encoding off;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-         }
+
+http {
+    # 基础配置
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    # 日志格式
+    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+                    '$status $body_bytes_sent "$http_referer" '
+                    '"$http_user_agent" "$http_x_forwarded_for" '
+                    'upstream: $upstream_addr $upstream_status $request_time';
+
+    access_log /var/log/nginx/access.log main buffer=64k flush=1m;
+
+    # 性能优化参数
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+    keepalive_requests 1000;
+    client_max_body_size 100m; # 统一设置，可在server块覆盖
+    client_body_timeout 60;
+    client_header_timeout 60;
+    send_timeout 60;
+    reset_timedout_connection on;
+
+    # 压缩配置
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+    # 反向代理通用配置
+    proxy_connect_timeout 30;
+    proxy_send_timeout 60;
+    proxy_read_timeout 60;
+    proxy_buffering off;
+    proxy_request_buffering off;
+
+    # 上游服务器通用头部设置
+    map $http_upgrade $proxy_connection {
+        default "";
+        websocket "upgrade";
    }

+    # 通用代理配置
+    proxy_set_header Host $http_host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $proxy_connection;
+    proxy_http_version 1.1;
+
+    # 共享服务器配置
+    server {
+        listen 8000 reuseport; # 端口复用，提高性能
+        server_name _; # 默认服务器
+        return 444; # 关闭连接，不发送响应
+    }
+
+    # 各个服务配置
    server {
-        server_name voce.liubeiting.cn;
        listen 8000;
+        server_name www.stayreal.online;
+        ignore_invalid_headers off;
+        client_max_body_size 0; # 无限制文件大小

        location / {
-            proxy_pass http://192.168.1.100:6000;
-            proxy_http_version 1.1;
-            proxy_set_header Host \$host;
-            proxy_set_header X-Real-IP \$remote_addr;
-            proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-            proxy_set_header Upgrade \$http_upgrade;
-            proxy_set_header Connection "upgrade";
+            proxy_pass http://192.168.1.100:8080;
+            # 使用通用的proxy_set_header配置
        }
    }

    server {
-        listen       8000;
-        server_name  rustfs.liubeiting.cn;
-        # Allow special characters in headers
+        listen 8000;
+        server_name voce.liubeiting.cn;
+
+        location / {
+            proxy_pass http://192.168.1.100:6000;
+            # 使用通用的proxy_set_header配置
+        }
+    }
+
+    server {
+        listen 8000;
+        server_name rustfs.liubeiting.cn;
        ignore_invalid_headers off;
-        # Allow any size file to be uploaded.
-        # Set to a value such as 1000m; to restrict file size to a specific value
        client_max_body_size 0;
-        # Disable buffering
-        proxy_buffering off;
-        proxy_request_buffering off;
+
        location / {
-            proxy_pass  http://192.168.1.100:9004;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_connect_timeout 300;
-            # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
-            proxy_http_version 1.1;
-            proxy_set_header Connection "";
-            chunked_transfer_encoding off;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-         }
+            proxy_pass http://192.168.1.100:9004;
+        }
    }

-
    server {
-        listen       8000;
-        server_name  git.liubeiting.cn;
+        listen 8000;
+        server_name git.liubeiting.cn;
        client_max_body_size 100m;
+
        location / {
-            proxy_pass  http://192.168.1.100:3000;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host $host; # 主机名
-            proxy_set_header X-Real-Ip $remote_addr;# 真实 IP
-            proxy_set_header X-Forwarded-For $remote_addr; # 表示 HTTP 请求端真实 IP
+            proxy_pass http://192.168.1.100:3000;
+            proxy_set_header Host $host; # 覆盖通用配置
+            proxy_set_header X-Real-Ip $remote_addr;
+            proxy_set_header X-Forwarded-For $remote_addr;
            include /etc/nginx/blackip.conf;
-         }
+        }
    }

    server {
-         listen       8000;
-         server_name  panel.liubeiting.cn;
-         client_max_body_size 100m;
-         location / {
-             proxy_pass  http://192.168.1.100:8807;
-             proxy_redirect off;#以下是一些反向代理的配置可删除
-             proxy_pass_header  Set-Cookie; # cookie
-             proxy_set_header Host $host; # 主机名
-             proxy_set_header X-Real-Ip $remote_addr;# 真实 IP
-             proxy_set_header X-Forwarded-For $remote_addr; # 表示 HTTP 请求端真实 IP
-             proxy_set_header Upgrade $http_upgrade;
-             proxy_set_header Connection "upgrade";
-          }
-    }
-    server {
-        listen       8000;
-        server_name  n8n.liubeiting.cn;
+        listen 8000;
+        server_name panel.liubeiting.cn;
+        client_max_body_size 100m;
+
        location / {
-            proxy_pass  http://192.168.1.100:5678;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host n8n.liubeiting.cn:8000; # 主机名
+            proxy_pass http://192.168.1.100:8807;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-Ip $remote_addr;
+            proxy_set_header X-Forwarded-For $remote_addr;
+        }
+    }
+
+    server {
+        listen 8000;
+        server_name n8n.liubeiting.cn;
+
+        location / {
+            proxy_pass http://192.168.1.100:5678;
+            proxy_set_header Host n8n.liubeiting.cn:8000;
            proxy_set_header Origin http://n8n.liubeiting.cn:8000;
-            proxy_set_header X-Real-Ip $remote_addr;# 真实 IP
-            proxy_set_header X-Forwarded-For $remote_addr; # 表示 HTTP 请求端真实 IP
-            proxy_http_version 1.1;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-         }
+            proxy_set_header X-Real-Ip $remote_addr;
+            proxy_set_header X-Forwarded-For $remote_addr;
+        }
    }

    server {
-        listen       8000;
-        server_name  file.liubeiting.cn;
+        listen 8000;
+        server_name file.liubeiting.cn;
+
        location / {
-            proxy_pass  http://192.168.1.100:9090;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host $host; # 主机名
-            proxy_set_header X-Real-Ip $remote_addr;# 真实 IP
-            proxy_set_header X-Forwarded-For $remote_addr; # 表示 HTTP 请求端真实 IP
-         }
+            proxy_pass http://192.168.1.100:9090;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-Ip $remote_addr;
+            proxy_set_header X-Forwarded-For $remote_addr;
+        }
    }

    server {
-        listen       8000;
-        server_name  cloud.liubeiting.cn;
+        listen 8000;
+        server_name cloud.liubeiting.cn;
+
        location / {
-            proxy_pass  http://192.168.1.100:5244;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass http://192.168.1.100:5244;
            proxy_set_header X-NginX-Proxy true;
-            # This is necessary to pass the correct IP to be hashed
            real_ip_header X-Real-IP;
-            proxy_connect_timeout 300;
-            proxy_http_version 1.1;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-
            chunked_transfer_encoding off;
-         }
+        }
    }

    server {
-        listen       8000;
-        server_name  news.liubeiting.cn;
+        listen 8000;
+        server_name news.liubeiting.cn;
+
        location / {
-            proxy_pass  http://192.168.1.100:9003;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass http://192.168.1.100:9003;
            proxy_set_header X-NginX-Proxy true;
-            # This is necessary to pass the correct IP to be hashed
            real_ip_header X-Real-IP;
-            proxy_connect_timeout 300;
-            proxy_http_version 1.1;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-
            chunked_transfer_encoding off;
-         }
+        }
    }

    server {
-        listen       8000;
-        server_name  search.liubeiting.cn;
+        listen 8000;
+        server_name search.liubeiting.cn;
+
        location / {
-            proxy_pass  http://192.168.1.100:10001;
-            proxy_redirect off;#以下是一些反向代理的配置可删除
-            proxy_pass_header  Set-Cookie; # cookie
-            proxy_set_header Host $host; # 主机名
-            proxy_set_header X-Real-Ip $remote_addr;# 真实 IP
-            proxy_set_header X-Forwarded-For $remote_addr; # 表示 HTTP 请求端真实 IP
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-         }
+            proxy_pass http://192.168.1.100:10001;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-Ip $remote_addr;
+            proxy_set_header X-Forwarded-For $remote_addr;
+        }
    }
-
-
 }