aliyun-nginx-frp

nas.conf

server {
    listen 80;
    #include /etc/nginx/cert/qunhui.conf;
    server_name qunhui.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;


    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:35000;
    }
}

teamcity.conf

server {
    listen 80 ;
    #include /etc/nginx/cert/teamcity.conf;
    server_name teamcity.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;

    error_page 500 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        error_log logs/error.log error;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Host $server_name:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:30836;
    }
    location /repository/download {
        autoindex on;
        autoindex_exact_size on;
        autoindex_localtime on;
        charset utf-8;
        proxy_hide_header 'Content-Disposition';
        if ($request_filename ~* ^.*?\.(txt|doc|pdf|rar|gz|zip|docx|exe|xlsx|ppt|pptx)$) {
            add_header Content-Disposition: 'inline;';
        }
        proxy_pass http://47.108.170.20:30836;
    }

}

confluence.conf

server {
    listen 80 ;
    #include /etc/nginx/cert/confluence.conf;
    server_name confluence.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;

    error_page 500 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_set_header Host $server_name:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:30679;
    }

}

server {
    listen 80 ;
    server_name confluence.liuchenyun.com;
    proxy_request_buffering off;
    proxy_set_header Host $host;
    proxy_set_body $request_body;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;

    location / {
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods *;
        rewrite ^/(.*)$ https://confluence.liuchenyun.com/$1 permanent;
    }
}

sonarcube.conf

server {
    listen 80 ;
    server_name sonarcube.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;


    error_page 500 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_set_header Host $server_name:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:30900;
    }

}

nextcloud.conf

server {
    listen 80 ;
    server_name nextcloud.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;
    gzip off;

    error_page 500 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_set_header Host $server_name:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:30984;
    }

}

nexus.conf

server {
    listen 80;
    server_name nexus.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;


    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:32081;
    }
    
    location /maven {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://47.108.170.20:32081/repository/maven-public/;
    }
    
    location /snapshots {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://47.108.170.20:32081/repository/maven-snapshots/;
    }
    
    location /releases {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://47.108.170.20:32081/repository/maven-releases/;
    }
}

uptimekuma.conf

server {
    listen 80;
    server_name uptimekuma.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;


    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:32061;
    }
}

vitepress.conf

server {
    listen 80;
    #include /etc/nginx/cert/vitepress.conf;
    server_name vitepress.liuchenyun.com;
    proxy_set_header Host $host;
    proxy_connect_timeout 3s;
    client_max_body_size 600m;
    client_body_buffer_size 600m;


    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root html;
    }

    location / {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://47.108.170.20:30388;
    }
}

ssl

wiki.conf

listen  443 ssl;
ssl_certificate   /etc/nginx/cert/vitepress.liuchenyun.com.pem;
ssl_certificate_key  /etc/nginx/cert/vitepress.liuchenyun.com.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;