Nginx 反向代理配置

104 阅读1分钟

Nginx 配置

server {
      server_name 10.10.10.10;
      location / {
      proxy_redirect off;
      proxy_cookie_domain google.com 10.10.10.10;
      proxy_pass https://www.google.com;
      proxy_connect_timeout 20s;
      proxy_read_timeout 600s;
      proxy_send_timeout 600s;

      proxy_set_header Host "www.google.com";
      proxy_set_header User-Agent $http_user_agent;
      proxy_set_header Referer https://www.google.com;
      proxy_set_header Accept-Encoding "";
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto https;
      proxy_set_header Accept-Language "zh-CN";
      sub_filter https://www.google.com https://10.10.10.10;
      sub_filter https://www.google.co.jp https://10.10.10.10;
      sub_filter_once off;
      addition_types *;
  }

使用openssl 生成域名证书

openssl genrsa -out abc.cn.key 2048 
openssl req -new -key abc.cn.key -out abc.cn.csr 
openssl x509 -req -days 365 -in abc.cn.csr -signkey abc.cn.key -out swjnxyf.cn.crt

ssl_certificate /etc/nginx/certs/abc.cn.crt; 
ssl_certificate_key /etc/nginx/certs/abc.cn.key;