一、背景
只有一台服务器，一个顶级域名，现在需要根据不同子域名访问不同web项目，比如
# 管理后台
cms.biacu.com
# 客户端h5
h5.biacu.com
# 四级域名
h5.s.biacu.com
同时，不同web项目放在不同位置
二、
1、在云服务器上，添加解析，如下图
2、nginx.conf的配置如下
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
# 开启gzip 来提高页面加载速度
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
#gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
gzip_vary off;
gzip_disable "MSIE [1-6]\.";
# include /data/nginx/conf/conf.d/*.conf;
# 做了映射 - /data/nginx/conf:/etc/nginx
include /etc/nginx/conf.d/*.conf;
server {
listen 80;
#填写绑定证书的域名
server_name www.baicu.com;
#把http的域名请求转成https
#return 301 https://$host$request_uri;
location / {
# 默认
# root html;
# docker 做了映射 - /data/nginx/html:/usr/share/nginx/html
root /usr/share/nginx/html;
index index.html index.htm;
}
}
server {
listen 8001;
server_name localhost;
location / {
# 页面存放地址
root /home/ruoyi/20240612/cms;
index index.html;
try_files $uri $uri/ /index.html;
}
# 转发请求到后端 chat
location /prod-api/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://你的公网IP:8080/;
proxy_cookie_path /prod-api/ /;
proxy_buffer_size 1024k;
proxy_buffers 16 1024k;
proxy_busy_buffers_size 2048k;
proxy_temp_file_write_size 2048k;
}
}
server {
listen 80;
server_name 20240612.cms.baicu.com;
location / {
proxy_pass http://你的公网IP:8001;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
server {
#SSL 访问端口号为 443
listen 443 ssl;
#填写绑定证书的域名
server_name www.baicu.com;
#证书文件名称
ssl_certificate baicu.com.crt;
#私钥文件名称
ssl_certificate_key baicu.com.key;
ssl_session_timeout 5m;
#请按照以下协议配置
ssl_protocols TLSv1.2 TLSv1.3;
#请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
ssl_ciphers ECDHE-RSA-AES228-GCM-SHA246:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
# docker 做了映射 - /data/nginx/html:/usr/share/nginx/html
root /usr/share/nginx/html;
index index.html index.htm;
}
}
server {
#SSL 访问端口号为 443
listen 443 ssl;
#填写绑定证书的域名
server_name 20240612.cms.baicu.com;
#证书文件名称
ssl_certificate baicu.com.crt;
#私钥文件名称
ssl_certificate_key baicu.com.key;
ssl_session_timeout 5m;
#请按照以下协议配置
ssl_protocols TLSv1.2 TLSv1.3;
#请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
ssl_ciphers ECDHE-RSA-AES208-GCM-SHA156:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://你的公网IP:8001;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# 转发请求到后端
location /prod-api/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://你的公网IP:8080/;
proxy_cookie_path /prod-api/ /;
proxy_buffer_size 1024k;
proxy_buffers 16 1024k;
proxy_busy_buffers_size 2048k;
proxy_temp_file_write_size 2048k;
}
}
}
3、include引入conf.d的其他conf的配置
server {
listen 8002;
server_name localhost;
location / {
# 页面存放地址
root /home/ruoyi/20240612/h5;
index index.html;
try_files $uri $uri/ /index.html;
}
# 转发请求到后端
location /prod-api/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://你的公网IP:8080/;
proxy_cookie_path /prod-api/ /;
proxy_buffer_size 1024k;
proxy_buffers 16 1024k;
proxy_busy_buffers_size 2048k;
proxy_temp_file_write_size 2048k;
}
}
server {
listen 80;
server_name 20240612.h5.baicu.com;
location / {
proxy_pass http://你的公网IP:8002;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
server {
#SSL 访问端口号为 443
listen 443 ssl;
#填写绑定证书的域名
server_name 20240612.h5.baicu.com;
#证书文件名称
ssl_certificate baicu.com.crt;
#私钥文件名称
ssl_certificate_key baicu.com.key;
ssl_session_timeout 5m;
#请按照以下协议配置
ssl_protocols TLSv1.2 TLSv1.3;
#请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
ssl_ciphers ECDHE-RSA-AES208-GCM-SHA226:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://你的公网IP:8002;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# 转发请求到后端
location /prod-api/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://你的公网IP:8080/;
proxy_cookie_path /prod-api/ /;
proxy_buffer_size 1024k;
proxy_buffers 16 1024k;
proxy_busy_buffers_size 2048k;
proxy_temp_file_write_size 2048k;
}
}4、dockerFile的文件配置如下
version: '3.1'
services:
nginx:
image: nginx
restart: always
container_name: nginx
hostname: nginx
ports:
- 80:80
- 443:443
- 8001:8001
- 8002:8002
environment:
TZ: Asia/Shanghai
volumes:
- /data/nginx/conf:/etc/nginx
- /data/nginx/logs:/var/log/nginx
- /data/nginx/html:/usr/share/nginx/html
- /home/ruoyi/console:/home/ruoyi/console/
- /home/ruoyi/20240612/h5:/home/ruoyi/20240612/h5/
- /home/ruoyi/20240612/cms:/home/ruoyi/20240612/cms/
