nginx 完整配置

sites-enabled/filebrowser

@@ -0,0 +1 @@
+/etc/nginx/sites-available/filebrowser

sites-enabled/fip.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/fip.140103.xyz

sites-enabled/form.140103.xyz

@@ -0,0 +1,37 @@
+server {
+    server_name form.140103.xyz;
+
+location / {
+    proxy_pass http://localhost:3100;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection 'upgrade';
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_cache_bypass $http_upgrade;
+    add_header Content-Security-Policy "frame-ancestors *";
+}
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/form.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/form.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = form.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name form.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

sites-enabled/forum.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/forum.140103.xyz

sites-enabled/ftp.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/ftp.140103.xyz

sites-enabled/git.140103.xyz

@@ -0,0 +1,28 @@
+server {
+    server_name git.140103.xyz;
+    location / {
+        proxy_pass http://127.0.0.1:3001;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/git.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/git.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = git.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name git.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

sites-enabled/happy.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/happy.140103.xyz

sites-enabled/joplin.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/joplin.conf

sites-enabled/kids

@@ -0,0 +1 @@
+/etc/nginx/sites-available/kids

sites-enabled/manager-io

@@ -0,0 +1 @@
+/etc/nginx/sites-available/manager-io

sites-enabled/mcp.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/mcp.140103.xyz

sites-enabled/n8n

@@ -0,0 +1 @@
+/etc/nginx/sites-available/n8n

sites-enabled/nocodb.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/nocodb.140103.xyz

sites-enabled/office.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/office.140103.xyz

sites-enabled/pad.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/pad.140103.xyz

sites-enabled/sso.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/sso.conf

sites-enabled/tianna.140103.xyz

@@ -0,0 +1,30 @@
+server {
+    server_name tianna.140103.xyz;
+
+    location / {
+    proxy_pass http://127.0.0.1:11005;
+    proxy_set_header Host $http_host; # 这一行非常关键
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+}
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/tianna.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/tianna.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = tianna.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name tianna.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

sites-enabled/upload

@@ -0,0 +1 @@
+/etc/nginx/sites-available/upload

sites-enabled/vaultwarden

@@ -0,0 +1 @@
+/etc/nginx/sites-available/vaultwarden

sites-enabled/vikunja

@@ -0,0 +1 @@
+/etc/nginx/sites-available/vikunja

sites-enabled/ybih.140103.xyz

@@ -0,0 +1,40 @@
+server {
+    listen 443 ssl;
+    server_name www.yaobai.org;
+    ssl_certificate /etc/letsencrypt/live/www.yaobai.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/www.yaobai.org/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    location /aisearch {
+        proxy_pass http://127.0.0.1:8766/search;
+        proxy_set_header Host $host;
+        proxy_read_timeout 120s;
+        proxy_send_timeout 120s;
+        add_header Access-Control-Allow-Origin *;
+    }
+    
+
+    location / {
+        proxy_pass http://127.0.0.1:11006;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name ybih.140103.xyz;
+    ssl_certificate /etc/letsencrypt/live/ybih.140103.xyz/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/ybih.140103.xyz/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    return 301 https://www.yaobai.org$request_uri;
+}
+
+server {
+    listen 80;
+    server_name www.yaobai.org ybih.140103.xyz;
+    return 301 https://www.yaobai.org$request_uri;
+}

sites-enabled/zitadel.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/zitadel.conf