k8s nginx+ingress 配置
1 nginx> ingress 配置:
2 nginx >service 配置
3 nginx pod配置:
4 nginx.conf 配置文件:
# web端v1
server
{
listen 30006;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
#add_header Content-Security-Policy "default-src 'self' http://test123.realize.cn; font-src 'self' data:; script-src unsafe-inline; script-src-elem unsafe-inline";
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options "SAMEORIGIN always";
add_header X-Content-Type-Options "nosniff";
# 转发websocket需要的设置
proxy_set_header X-Real_IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
location / {
proxy_pass http://frontdongmi-official-v1.rz-dt:30001/;
}
location /rzwebgateway/ {
client_max_body_size 1024M;
client_body_buffer_size 1024M;
proxy_pass http://realize-gateway.rz-dt:9300/;
}
location /gateway/ {
proxy_set_header Connection 'keep-alive';
proxy_pass http://gatewayserver.rz-dt:30001/;
}
}
# 采集平台
server
{
listen 30004;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
# 转发websocket需要的设置
proxy_set_header X-Real_IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
location / {
proxy_pass http://spiderflow.rz-dt:30001/;
}
access_log /var/log/nginx/spider.reize.cn.log;
}
# 视频营销
server
{
listen 30005;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
# 转发websocket需要的设置
proxy_set_header X-Real_IP $remote_addr;
proxy_set_header Host idtcdn.oss-cn-hangzhou.aliyuncs.com;
proxy_set_header X_Forward_For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
location / {
proxy_pass http://reize.oss-cn-hangzhou.aliyuncs.com/;
}
access_log /var/log/nginx/video.reize.cn.log;
}
}