Replies: 6 comments 4 replies
-
How did you configure the reverse proxy and domain name? |
Beta Was this translation helpful? Give feedback.
-
We believe your issue is similar to this feedback, and we will work together to resolve this bug. |
Beta Was this translation helpful? Give feedback.
-
我用的是1Panel里面的网站(OpenResty)进行的反向代理,如下图所示。 |
Beta Was this translation helpful? Give feedback.
-
Please use the nginx proxy config below and we check that everything is ok.
|
Beta Was this translation helpful? Give feedback.
-
I modified it as above, but it still doesn't work after restarting. upstream rustfs {
least_conn;
server 127.0.0.1:9000;
}
server {
listen 80 ;
listen 443 ssl http2 ;
proxy_headers_hash_max_size 1024; # 新增
proxy_headers_hash_bucket_size 128; # 新增
server_name s3.xxx.com;
index index.php index.html index.htm default.php default.htm default.html;
ignore_invalid_headers off;
client_max_body_size 0;
proxy_buffering off;
proxy_request_buffering off;
access_log /www/sites/s3.xxx.com/log/access.log main;
error_log /www/sites/s3.xxx.com/log/error.log;
if ($scheme = http) {
return 301 https://$host$request_uri;
}
ssl_certificate /www/sites/s3.xxx.com/ssl/fullchain.pem;
ssl_certificate_key /www/sites/s3.xxx.com/ssl/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1h;
location ^~ /.well-known/acme-challenge {
allow all;
root /usr/share/nginx/html;
}
# ▼ 代理头设置 ▼
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $server_name;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_connect_timeout 300;
chunked_transfer_encoding off;
# WebSocket支持
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
# 安全头
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-XSS-Protection "1; mode=block" always;
error_page 497 https://$host$request_uri;
# 已删除原 location / 配置块,由 include 文件处理
include /www/sites/s3.xxx.com/proxy/*.conf;
} |
Beta Was this translation helpful? Give feedback.
-
What is the error now? |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
English:
The LAN address, preview, and temporary link all display correctly, but after setting up the domain name and reverse proxy, they no longer display properly. Does anyone know why?
The docker-compose.yml file is as follows:
Chinese:
局域网地址,预览和临时链接都可以显示,但是设置域名和反向代理后,就不能正常显示了,哪位知道是什么原因吗?
docker-compose.yml如下:
Beta Was this translation helpful? Give feedback.
All reactions