☰

Nginx：端口重定向

tag-icon • tag-icon nginx tomcat port redirection
Nginx：端口重定向

我正在使用 nginx 作为反向代理，我想将通过 url 提供的端口 3000 重定向到代理传递上的相同端口，但我尝试时总是重定向到 443 端口。

以下是当前配置：

server {

    listen 80 ;
    listen 443 ssl;
    listen 3000 ssl;
    server_name example.com;
    ssl_certificate /etc/ssl/certs/example.fullchain.pem;
    ssl_certificate_key /etc/ssl/private/example.pem;
        location / {
                #auth_basic "Vous devez vous authentifier";
                #auth_basic_user_file /etc/nginx/htpasswd;
                if ($scheme = http) {
                    return 301 https://$server_name$request_uri;
                }
                proxy_pass http://10.10.10.10
                proxy_set_header Host $http_host;
                proxy_read_timeout  90;
        }
    location /.well-known/acme-challenge {
        root /var/www/letsencrypt;
    }
    # ...
}

你知道如何重定向到http://10.10.10.10:3000当访问https://example.com:3000？

编辑：

我也尝试了如下配置，但仍然遇到同样的问题。

server {

    listen 80 ;
    listen 443 ssl;
    server_name example.com;
    ssl_certificate /etc/ssl/certs/example.fullchain.pem;
    ssl_certificate_key /etc/ssl/private/example.pem;
        location / {
                #auth_basic "Vous devez vous authentifier";
                #auth_basic_user_file /etc/nginx/htpasswd;
                if ($scheme = http) {
                    return 301 https://$server_name$request_uri;
                }
                proxy_pass http://10.10.10.10;
                proxy_set_header Host $http_host;
                proxy_read_timeout  90;
        }
    location /.well-known/acme-challenge {
        root /var/www/letsencrypt;
    }
}

server {

    listen 3000 ssl;
    server_name example.com;
    ssl_certificate /etc/ssl/certs/example.fullchain.pem;
    ssl_certificate_key /etc/ssl/private/example.pem;
        location / {
                proxy_pass http://10.10.10.10:3000;
                proxy_set_header Host $http_host;
                proxy_read_timeout  90;
        }
    location /.well-known/acme-challenge {
        root /var/www/letsencrypt;
    }
}

答案1

使用两个服务器块的第二种方法是正确的。您只需删除重定向到 https（这将使请求返回到端口 443）。

server {

    listen 3000 ssl;
    server_name example.com;
    ssl_certificate /etc/ssl/certs/example.fullchain.pem;
    ssl_certificate_key /etc/ssl/private/example.pem;
        location / {
                proxy_pass http://10.10.10.10:3000;
                proxy_set_header Host $http_host;
                proxy_read_timeout  90;
        }
    location /.well-known/acme-challenge {
        root /var/www/letsencrypt;
    }
}

相关内容