nginx 初始配置

filebrowser

@@ -0,0 +1 @@
+/etc/nginx/sites-available/filebrowser

fip.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/fip.140103.xyz

form.140103.xyz

@@ -0,0 +1,37 @@
+server {
+    server_name form.140103.xyz;
+
+location / {
+    proxy_pass http://localhost:3100;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection 'upgrade';
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_cache_bypass $http_upgrade;
+    add_header Content-Security-Policy "frame-ancestors *";
+}
+
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/form.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/form.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = form.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name form.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

forum.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/forum.140103.xyz

ftp.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/ftp.140103.xyz

git.140103.xyz

@@ -0,0 +1,28 @@
+server {
+    server_name git.140103.xyz;
+    location / {
+        proxy_pass http://127.0.0.1:3001;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/git.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/git.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = git.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name git.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

happy.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/happy.140103.xyz

joplin.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/joplin.conf

kids

@@ -0,0 +1 @@
+/etc/nginx/sites-available/kids

manager-io

@@ -0,0 +1 @@
+/etc/nginx/sites-available/manager-io

mcp.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/mcp.140103.xyz

n8n

@@ -0,0 +1 @@
+/etc/nginx/sites-available/n8n

nocodb.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/nocodb.140103.xyz

office.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/office.140103.xyz

pad.140103.xyz

@@ -0,0 +1 @@
+/etc/nginx/sites-available/pad.140103.xyz

sso.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/sso.conf

tianna.140103.xyz

@@ -0,0 +1,30 @@
+server {
+    server_name tianna.140103.xyz;
+
+    location / {
+    proxy_pass http://127.0.0.1:11005;
+    proxy_set_header Host $http_host; # 这一行非常关键
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+}
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/tianna.140103.xyz/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/tianna.140103.xyz/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+}
+server {
+    if ($host = tianna.140103.xyz) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    server_name tianna.140103.xyz;
+    return 404; # managed by Certbot
+
+
+}

upload

@@ -0,0 +1 @@
+/etc/nginx/sites-available/upload

vaultwarden

@@ -0,0 +1 @@
+/etc/nginx/sites-available/vaultwarden

vikunja

@@ -0,0 +1 @@
+/etc/nginx/sites-available/vikunja

ybih.140103.xyz

@@ -0,0 +1,40 @@
+server {
+    listen 443 ssl;
+    server_name www.yaobai.org;
+    ssl_certificate /etc/letsencrypt/live/www.yaobai.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/www.yaobai.org/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    location /aisearch {
+        proxy_pass http://127.0.0.1:8766/search;
+        proxy_set_header Host $host;
+        proxy_read_timeout 120s;
+        proxy_send_timeout 120s;
+        add_header Access-Control-Allow-Origin *;
+    }
+    
+
+    location / {
+        proxy_pass http://127.0.0.1:11006;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name ybih.140103.xyz;
+    ssl_certificate /etc/letsencrypt/live/ybih.140103.xyz/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/ybih.140103.xyz/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    return 301 https://www.yaobai.org$request_uri;
+}
+
+server {
+    listen 80;
+    server_name www.yaobai.org ybih.140103.xyz;
+    return 301 https://www.yaobai.org$request_uri;
+}

zitadel.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/zitadel.conf