Nginx self-signed https and reverse proxy<\/p>\n
The company’s wiki server and docker private registry in the company’s desktop cloud, since public IP resource constraints,
\nthese servers can not be coupled with each public network IP, it can only be accessed through a public IP, so you need to use Nginx Be a reverse proxy to access these servers.
\nIn addition, these services should be accessed with https.<\/p>\n
server IP network
\nwiki.rmohan.com 192.168.1.47
\nhub.rmohan.com 192.168.1.48
\nGenerate a self-signed certificate<\/p>\n
mkdir -p \/etc\/nginx\/ssl
\nopenssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout \/etc\/nginx\/ssl\/nginx.key -out \/etc\/nginx\/ssl\/nginx.crt<\/p>\n
tc\/nginx\/sites-available\/default<\/p>\n
upstream wiki {
\nserver 192.168.1.47:80; # wiki.rmohan.com
\n}<\/p>\n
upstream hub {
\nserver 192.168.1.48; # hub.rmohan.com
\n}<\/p>\n
## Start wiki.rmohan.com ##
\nserver {<\/p>\n
listen 80;<\/p>\n
listen 443 ssl;<\/p>\n
ssl_certificate \/etc\/nginx\/ssl\/nginx.crt;
\nssl_certificate_key \/etc\/nginx\/ssl\/nginx.key;<\/p>\n
server_name wiki.google.com;<\/p>\n
access_log \/var\/log\/nginx\/wiki.rmohan.access.log;
\nerror_log \/var\/log\/nginx\/wiki.rmohan.error.log;
\nroot \/usr\/share\/nginx\/html;
\nindex index.html index.htm;<\/p>\n
## send request back to apache1 ##
\nlocation \/ {
\nproxy_pass http:\/\/wiki;
\nproxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
\nproxy_redirect off;
\nproxy_buffering off;
\nproxy_set_header Host $host;
\nproxy_set_header X-Real-IP $remote_addr;
\nproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
\n}
\n}
\n## End wiki.rmohan.com ##<\/p>\n
## START hub.rmohan.com ##
\nserver {
\nserver_name hub.rmohan.com;<\/p>\n
listen 80;
\nlisten 443 ssl;<\/p>\n
ssl_certificate \/etc\/nginx\/ssl\/nginx.crt;
\nssl_certificate_key \/etc\/nginx\/ssl\/nginx.key;<\/p>\n
access_log \/var\/log\/nginx\/hub.rmohan.access.log;
\nerror_log \/var\/log\/nginx\/hub.rmohan.error.log;
\nroot \/usr\/local\/nginx\/html;
\nindex index.html;<\/p>\n
location \/ {
\nproxy_pass https:\/\/hub;
\nproxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
\nproxy_redirect off;
\nproxy_buffering off;
\nproxy_set_header Host $host;
\nproxy_set_header X-Real-IP $remote_addr;
\nproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
\n}
\n}
\n## END hub.rmohan.com ##<\/p>\n
IP restrictions<\/p>\n
For safety reasons, to ban people outside the company access to these services,
\nthe company set up to allow only IP access nginx years. In the two configurations above was added the following:<\/p>\n
allow 203.38.12.12;
\nallow 203.38.12.20;
\ndeny all;<\/p>\n","protected":false},"excerpt":{"rendered":"
Nginx self-signed https and reverse proxy<\/p>\n
The company’s wiki server and docker private registry in the company’s desktop cloud, since public IP resource constraints, these servers can not be coupled with each public network IP, it can only be accessed through a public IP, so you need to use Nginx Be a reverse proxy to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[70],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5441"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5441"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5441\/revisions"}],"predecessor-version":[{"id":5442,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5441\/revisions\/5442"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}