兄弟们我又来了，有个问题又搞不懂了，帮帮我这个菜鸟吧

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

已注册用户请登录

这是一个创建于 833 天前的主题，其中的信息可能已经有所发展或是发生改变。

server { listen 80; listen [::]:80; server_name xxx.xxx.xxx; return 301 $host$request_uri; } server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name xxx.xxx.xxx; ssl_certificate /etc/nginx/ssl/xxx.xxx.xxx.pem; ssl_certificate_key /etc/nginx/ssl/xxx.xxx.xxx.key; location / { proxy_pass http://172.20.0.7:4000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-Proto $scheme; add_header X-Cache $upstream_cache_status; proxy_set_header Accept-Encoding ""; sub_filter "http://" "https://"; sub_filter_once off; } }

nginx 配置如上现在的问题是 nginx 容器内可以访问 http://172.20.0.7:4000 ，宿主机也可以访问 172.20.0.7:4000,使用服务器 ip:4000 也可以访问这个容器，但是使用域名:https://xxx.xxx.xxx 就提示花了太长时间进行响应 443 端口也映射了。不知道是什么问题了。。太难了。

第 1 条附言 2023-07-26 17:41:26 +08:00

```
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;

server {
listen 80;
listen [::]:80;
server_name www.xxx.xxx;
return 301 $host$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name www.xxx.xxx;

ssl_certificate /etc/nginx/ssl/www.xxx.xxx.pem;
ssl_certificate_key /etc/nginx/ssl/www.xxx.xxx.key;

location / {
proxy_pass http://172.20.0.6:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

# api.xxx.xxx
server {
listen 80;
listen [::]:80;
server_name api.xxx.xxx;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name api.xxx.xxx;

ssl_certificate /etc/nginx/ssl/api.xxx.xxx.pem;
ssl_certificate_key /etc/nginx/ssl/api.xxx.xxx.key;

location / {
proxy_pass http://172.20.0.7:4000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;

add_header X-Cache $upstream_cache_status;

proxy_set_header Accept-Encoding "";
sub_filter "http://" "https://";
sub_filter_once off;
}
}
}
```
我现在 www.xxx.xxx 可以正常访问。api.xxx.xxx 不可以访问

第 2 条附言 2023-07-26 17:43:18 +08:00

user nginx; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; sendfile on; keepalive_timeout 65; # www.xxx.xxx server { listen 80; listen [::]:80; server_name www.xxx.xxx; return 301 $host$request_uri; } server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name www.xxx.xxx; ssl_certificate /etc/nginx/ssl/www.xxx.xxx.pem; ssl_certificate_key /etc/nginx/ssl/www.xxx.xxx.key; location / { proxy_pass http://172.20.0.6:3000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; poxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } # api.xxx.xxx server { listen 80; listen [::]:80; server_name api.xxx.xxx; return 301 https://$host$request_uri; } server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name api.xxx.xxx; ssl_certificate /etc/nginx/ssl/api.xxx.xxx.pem; ssl_certificate_key /etc/nginx/ssl/api.xxx.xxx.key; location / { proxy_pass http://172.20.0.7:4000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-Proto $scheme; add_header X-Cache $upstream_cache_status; proxy_set_header Accept-Encoding ""; sub_filter "http://" "https://"; sub_filter_once off; } } }

我现在 www.xxx.xxx 可以正常访问。api.xxx.xxx 不可以访问

第 3 条附言 2023-07-26 19:51:10 +08:00

好像是找到原因了，可能是因为我在解析里增加了 @

23 条回复 2023-07-27 08:53:28 +08:00