增加删改
This commit is contained in:
parent
bfbd5673e8
commit
66399950fe
@ -60,7 +60,6 @@ bash "${path_local}/${print_array[pick]}.sh" "$path"
|
|||||||
|
|
||||||
chmod +x "${path}/${print_array[pick]}.sh" && echo "脚本执行权限添加成功" || echo "脚本执行权限添加失败"
|
chmod +x "${path}/${print_array[pick]}.sh" && echo "脚本执行权限添加成功" || echo "脚本执行权限添加失败"
|
||||||
declare cron_job="${cron} ${path}/${print_array[pick]}.sh"
|
declare cron_job="${cron} ${path}/${print_array[pick]}.sh"
|
||||||
echo "正在配置自动任务"
|
|
||||||
(crontab -l 2>/dev/null | grep -v "${print_array[pick]}.sh") | crontab -
|
(crontab -l 2>/dev/null | grep -v "${print_array[pick]}.sh") | crontab -
|
||||||
(crontab -l 2>/dev/null; echo "$cron_job") | crontab -
|
(crontab -l 2>/dev/null; echo "$cron_job") | crontab -
|
||||||
|
|
||||||
|
|||||||
@ -17,6 +17,7 @@ fi
|
|||||||
|
|
||||||
case $pick in
|
case $pick in
|
||||||
'1')
|
'1')
|
||||||
|
echo "该系统安装了以下脚本"
|
||||||
for i in "$path"/* ; do
|
for i in "$path"/* ; do
|
||||||
if [[ $i == "${path}/*" ]];then
|
if [[ $i == "${path}/*" ]];then
|
||||||
echo "该地址不存在脚本"
|
echo "该地址不存在脚本"
|
||||||
@ -50,6 +51,5 @@ case $pick in
|
|||||||
echo "删除完成"
|
echo "删除完成"
|
||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
echo "删除完成"
|
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
@ -7,34 +7,6 @@ if ! [[ $pick_mode == "nginx" ]]; then
|
|||||||
domain=""
|
domain=""
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if ! command -v socat &> /dev/null; then
|
|
||||||
if [[ -f "/usr/bin/apt-get" ]];then
|
|
||||||
apt-get update -y
|
|
||||||
apt-get install socat -y
|
|
||||||
elif [[ -f "/usr/bin/apt" ]];then
|
|
||||||
apt update -y
|
|
||||||
apt install socat -y
|
|
||||||
elif [[ -f "/usr/bin/pacman" ]];then
|
|
||||||
pacman -Syu --noconfirm
|
|
||||||
pacman -Sy --noconfirm socat
|
|
||||||
else
|
|
||||||
echo "socat未安装"
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ ! -f "${HOME}/.acme.sh/acme.sh" ]];then
|
|
||||||
rm -rf ${HOME}/.apple.sh
|
|
||||||
declare mail
|
|
||||||
read -p "请输入用来申请域名的邮箱：" mail
|
|
||||||
if [[ ! $mail =~ .*@.* ]];then
|
|
||||||
echo "邮箱不合法"
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
|
|
||||||
curl https://get.acme.sh | sh -s "email=$mail"
|
|
||||||
fi
|
|
||||||
|
|
||||||
declare domain_str
|
declare domain_str
|
||||||
|
|
||||||
if [[ ! $domain ]];then
|
if [[ ! $domain ]];then
|
||||||
|
|||||||
30
Config/Web/acme/manage.sh
Normal file
30
Config/Web/acme/manage.sh
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
echo "1.查看已经成功申请证书的域名"
|
||||||
|
|
||||||
|
declare pick
|
||||||
|
read -p "请输入：" pick
|
||||||
|
|
||||||
|
case $pick in
|
||||||
|
'1')
|
||||||
|
declare print_name
|
||||||
|
declare print_number=0
|
||||||
|
declare -a print_arr
|
||||||
|
|
||||||
|
for i in "${HOME}/.acme.sh"/* ; do
|
||||||
|
print_name=$(basename $i )
|
||||||
|
if ! echo $print_name | grep _ecc ; then
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
print_name=$(echo $print_name | sed "s/_ecc//g" )
|
||||||
|
print_number=$(( print_number+1 ))
|
||||||
|
print_arr[$print_number]=$print_name
|
||||||
|
echo "${print_number}.${print_name}"
|
||||||
|
done
|
||||||
|
read -p "请选择要查看证书的详细信息" pick
|
||||||
|
if [[ $pick =~ [1-${#print_arr[@]}] ]]; then
|
||||||
|
bash "${HOME}/.acme.sh -info -d ${print_arr[$pick]}"
|
||||||
|
else
|
||||||
|
echo "选择错误"
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
28
Config/Web/acme/test.sh
Normal file
28
Config/Web/acme/test.sh
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
if ! command -v socat &> /dev/null; then
|
||||||
|
if [[ -f "/usr/bin/apt-get" ]];then
|
||||||
|
apt-get update -y
|
||||||
|
apt-get install socat -y
|
||||||
|
elif [[ -f "/usr/bin/apt" ]];then
|
||||||
|
apt update -y
|
||||||
|
apt install socat -y
|
||||||
|
elif [[ -f "/usr/bin/pacman" ]];then
|
||||||
|
pacman -Syu --noconfirm
|
||||||
|
pacman -Sy --noconfirm socat
|
||||||
|
else
|
||||||
|
echo "socat未安装"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ ! -f "${HOME}/.acme.sh/acme.sh" ]];then
|
||||||
|
rm -rf ${HOME}/.apple.sh
|
||||||
|
declare mail
|
||||||
|
read -p "请输入用来申请域名的邮箱：" mail
|
||||||
|
if [[ ! $mail =~ .*@.* ]];then
|
||||||
|
echo "邮箱不合法"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
|
||||||
|
curl https://get.acme.sh | sh -s "email=$mail"
|
||||||
|
fi
|
||||||
@ -1,245 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
if ! command -v nginx &> /dev/null; then
|
|
||||||
if [[ -f "/usr/bin/apt-get" ]];then
|
|
||||||
apt-get update -y
|
|
||||||
apt-get install nginx -y
|
|
||||||
elif [[ -f "/usr/bin/apt" ]];then
|
|
||||||
apt update -y
|
|
||||||
apt install nginx -y
|
|
||||||
elif [[ -f "/usr/bin/pacman" ]];then
|
|
||||||
pacman -Syu --noconfirm
|
|
||||||
pacman -Sy --noconfirm nginx
|
|
||||||
else
|
|
||||||
echo "nginx未安装"
|
|
||||||
exit
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
declare pick
|
|
||||||
echo "========$(basename $0 .sh)========"
|
|
||||||
echo "1.新增站点配置文件"
|
|
||||||
echo "2.查看已有站点配置文件"
|
|
||||||
echo "3.删除站点配置文件"
|
|
||||||
read -p "请选择：" pick
|
|
||||||
case $pick in
|
|
||||||
'1')
|
|
||||||
declare domain
|
|
||||||
read -p "请输入要绑定的域名多个用 空格 隔开：" domain
|
|
||||||
|
|
||||||
declare ssl_certificate
|
|
||||||
declare ssl_certificate_key
|
|
||||||
declare ssl_domain=$(echo "${domain}" | awk '{print $1}')
|
|
||||||
|
|
||||||
echo "ssl证书"
|
|
||||||
echo "1.自动申请(默认)"
|
|
||||||
echo "2.手动输入"
|
|
||||||
read -p "请输入：" pick
|
|
||||||
if [[ $pick == 2 ]]; then
|
|
||||||
echo "证书,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
|
||||||
read -p "请输入证书地址：" ssl_certificate
|
|
||||||
if [[ -z $ssl_certificate ]];then
|
|
||||||
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
|
||||||
fi
|
|
||||||
echo "密钥,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
|
||||||
|
|
||||||
read -p "请输入密钥地址：" ssl_certificate_key
|
|
||||||
if [[ -z $ssl_certificate_key ]];then
|
|
||||||
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
echo "1.nginx(默认)"
|
|
||||||
read -p "请选择：" pick
|
|
||||||
bash "$(dirname $0)/acme/apply" "nginx" "${domain}"
|
|
||||||
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
|
||||||
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
declare name
|
|
||||||
read -p "请输入配置文件名,默认为域名：" name
|
|
||||||
if [[ -z $name ]]; then
|
|
||||||
name=$ssl_domain
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "工作方式"
|
|
||||||
echo "1.反向代理（默认）"
|
|
||||||
echo "2.静态文件"
|
|
||||||
read -p "请选择：" pick
|
|
||||||
declare path
|
|
||||||
if [[ $pick == 2 ]]; then
|
|
||||||
read -p "请输入要代理的站点路径" path
|
|
||||||
cat > "/etc/nginx/sites-available/${name}.conf" << EOF
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2; # 监听 443 端口并启用 SSL 和 HTTP/2
|
|
||||||
server_name ${domain}; # 替换为你的域名
|
|
||||||
|
|
||||||
# SSL 证书配置
|
|
||||||
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
|
||||||
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
|
||||||
ssl_protocols TLSv1.2 TLSv1.3; # 仅使用安全的 TLS 协议版本
|
|
||||||
ssl_ciphers HIGH:!aNULL:!MD5; # 安全的密码套件
|
|
||||||
ssl_prefer_server_ciphers on; # 优先使用服务器的密码套件
|
|
||||||
ssl_session_cache shared:SSL:10m;
|
|
||||||
ssl_session_timeout 10m;
|
|
||||||
|
|
||||||
# HSTS（HTTP 严格传输安全）强制浏览器使用 HTTPS
|
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
||||||
|
|
||||||
# 设置文件传输的最大大小
|
|
||||||
client_max_body_size 100M; # 上传文件最大大小 (例如 100MB)
|
|
||||||
proxy_max_temp_file_size 1024m; # 代理最大临时文件大小
|
|
||||||
|
|
||||||
# 超时与缓冲设置
|
|
||||||
client_body_timeout 60s; # 等待客户端发送请求主体的超时时间
|
|
||||||
client_header_timeout 60s; # 等待客户端发送请求头的超时时间
|
|
||||||
send_timeout 60s; # 发送响应的超时时间
|
|
||||||
client_body_buffer_size 128k; # 上传缓冲区大小
|
|
||||||
proxy_buffer_size 4k; # 设置代理服务器响应的缓冲区大小
|
|
||||||
proxy_buffers 8 16k; # 代理服务器的缓冲区数和大小
|
|
||||||
proxy_busy_buffers_size 64k; # 忙碌代理缓冲区大小
|
|
||||||
large_client_header_buffers 4 16k; # 设置较大的客户端头部缓冲区，防止上传大文件时出现 413 错误
|
|
||||||
|
|
||||||
# 静态文件目录
|
|
||||||
root ${path};
|
|
||||||
index index.html index.htm;
|
|
||||||
|
|
||||||
# 日志
|
|
||||||
access_log /var/log/nginx/example.com_access.log;
|
|
||||||
error_log /var/log/nginx/example.com_error.log;
|
|
||||||
|
|
||||||
# 默认处理
|
|
||||||
location / {
|
|
||||||
try_files \$uri \$uri/ =404;
|
|
||||||
}
|
|
||||||
|
|
||||||
# 防止访问隐藏文件（如 .git）
|
|
||||||
location ~ /\. {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
|
|
||||||
# 错误页面配置
|
|
||||||
error_page 404 /404.html;
|
|
||||||
location = /404.html {
|
|
||||||
root /var/www/example.com/html;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# HTTP 到 HTTPS 重定向
|
|
||||||
server {
|
|
||||||
listen 80; # 监听 80 端口
|
|
||||||
server_name ${domain};
|
|
||||||
|
|
||||||
# 将所有 HTTP 请求重定向到 HTTPS
|
|
||||||
return 301 https://\$host\$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
EOF
|
|
||||||
else
|
|
||||||
read -p "请输入后端服务器的地址,如果只输入数字代表端口：" path
|
|
||||||
if [[ $path =~ [0-9]+ ]]; then
|
|
||||||
path="http://127.0.0.1:${path}"
|
|
||||||
fi
|
|
||||||
cat > "/etc/nginx/sites-available/${name}.conf" << EOF
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2; # 监听 443 端口，并启用 HTTP/2
|
|
||||||
server_name ${domain}; # 替换为你的域名
|
|
||||||
|
|
||||||
# SSL 证书配置
|
|
||||||
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
|
||||||
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
|
||||||
ssl_protocols TLSv1.2 TLSv1.3; # 使用安全的 TLS 协议版本
|
|
||||||
ssl_ciphers HIGH:!aNULL:!MD5; # 安全密码套件
|
|
||||||
ssl_prefer_server_ciphers on;
|
|
||||||
|
|
||||||
# 启用 SSL session 缓存和超时设置
|
|
||||||
ssl_session_cache shared:SSL:10m;
|
|
||||||
ssl_session_timeout 10m;
|
|
||||||
|
|
||||||
# 强制使用 HTTPS (HSTS)
|
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
||||||
|
|
||||||
# 日志设置
|
|
||||||
access_log /var/log/nginx/${name}_access.log;
|
|
||||||
error_log /var/log/nginx/${name}_error.log;
|
|
||||||
|
|
||||||
# 错误页面配置
|
|
||||||
error_page 404 /404.html;
|
|
||||||
location = /404.html {
|
|
||||||
root /var/www/example.com/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
# 设置文件传输的最大大小
|
|
||||||
client_max_body_size 100M; # 上传文件最大大小 (例如 100MB)
|
|
||||||
proxy_max_temp_file_size 1024m; # 代理最大临时文件大小
|
|
||||||
|
|
||||||
# 超时与缓冲设置
|
|
||||||
client_body_timeout 60s; # 等待客户端发送请求主体的超时时间
|
|
||||||
client_header_timeout 60s; # 等待客户端发送请求头的超时时间
|
|
||||||
send_timeout 60s; # 发送响应的超时时间
|
|
||||||
client_body_buffer_size 128k; # 上传缓冲区大小
|
|
||||||
proxy_buffer_size 4k; # 设置代理服务器响应的缓冲区大小
|
|
||||||
proxy_buffers 8 16k; # 代理服务器的缓冲区数和大小
|
|
||||||
proxy_busy_buffers_size 64k; # 忙碌代理缓冲区大小
|
|
||||||
large_client_header_buffers 4 16k; # 设置较大的客户端头部缓冲区，防止上传大文件时出现 413 错误
|
|
||||||
|
|
||||||
# 反向代理到后台应用 (常规 HTTP/HTTPS)
|
|
||||||
location / {
|
|
||||||
proxy_pass ${path}; # 反向代理到后端应用服务器
|
|
||||||
proxy_set_header Host \$host; # 保持原始主机头
|
|
||||||
proxy_set_header X-Real-IP \$remote_addr; # 传递客户端的真实 IP
|
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; # 传递代理链中的 IP
|
|
||||||
proxy_set_header X-Forwarded-Proto \$scheme; # 传递协议（HTTP 或 HTTPS）
|
|
||||||
|
|
||||||
# 防止后端服务器返回不安全的内容
|
|
||||||
proxy_redirect off;
|
|
||||||
|
|
||||||
# 超时时间配置
|
|
||||||
proxy_connect_timeout 60s;
|
|
||||||
proxy_send_timeout 60s;
|
|
||||||
proxy_read_timeout 60s;
|
|
||||||
send_timeout 60s;
|
|
||||||
}
|
|
||||||
|
|
||||||
# WebSocket 反向代理到后台应用
|
|
||||||
location /ws {
|
|
||||||
proxy_pass ${path}; # 反向代理到 WebSocket 应用服务器
|
|
||||||
proxy_http_version 1.1; # WebSocket 必须使用 HTTP 1.1
|
|
||||||
proxy_set_header Upgrade \$http_upgrade; # 升级请求头，用于 WebSocket
|
|
||||||
proxy_set_header Connection "Upgrade"; # 持久连接，保持 WebSocket 连接
|
|
||||||
proxy_set_header Host \$host; # 保持原始主机头
|
|
||||||
proxy_set_header X-Real-IP \$remote_addr; # 传递客户端的真实 IP
|
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; # 传递代理链中的 IP
|
|
||||||
proxy_set_header X-Forwarded-Proto \$scheme; # 传递协议（HTTP 或 HTTPS）
|
|
||||||
|
|
||||||
# 超时时间配置 (WebSocket 是长连接)
|
|
||||||
proxy_connect_timeout 60s;
|
|
||||||
proxy_send_timeout 60s;
|
|
||||||
proxy_read_timeout 3600s; # WebSocket 长连接需较长读超时
|
|
||||||
send_timeout 60s;
|
|
||||||
}
|
|
||||||
|
|
||||||
# 错误页面配置
|
|
||||||
error_page 502 /502.html;
|
|
||||||
location = /502.html {
|
|
||||||
root /usr/share/nginx/html; # 错误页面路径
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# HTTP 到 HTTPS 重定向
|
|
||||||
server {
|
|
||||||
listen 80; # 监听 HTTP 80 端口
|
|
||||||
server_name ${domain}; # 替换为你的域名
|
|
||||||
|
|
||||||
# 将所有 HTTP 请求重定向到 HTTPS
|
|
||||||
return 301 https://\$host\$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
EOF
|
|
||||||
fi
|
|
||||||
ln -s "/etc/nginx/sites-available/${name}.conf" "/etc/nginx/sites-enabled" &> /dev/null
|
|
||||||
nginx -s reload &> /dev/null
|
|
||||||
echo "配置完成"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
217
Config/Web/nginx/install.sh
Normal file
217
Config/Web/nginx/install.sh
Normal file
@ -0,0 +1,217 @@
|
|||||||
|
declare domain
|
||||||
|
read -p "请输入要绑定的域名多个用 空格 隔开：" domain
|
||||||
|
|
||||||
|
declare ssl_certificate
|
||||||
|
declare ssl_certificate_key
|
||||||
|
declare ssl_domain=$(echo "${domain}" | awk '{print $1}')
|
||||||
|
|
||||||
|
echo "ssl证书"
|
||||||
|
echo "1.自动申请(默认)"
|
||||||
|
echo "2.手动输入"
|
||||||
|
read -p "请输入：" pick
|
||||||
|
if [[ $pick == 2 ]]; then
|
||||||
|
echo "证书,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
read -p "请输入证书地址：" ssl_certificate
|
||||||
|
if [[ -z $ssl_certificate ]];then
|
||||||
|
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
fi
|
||||||
|
echo "密钥,默认 ${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
|
||||||
|
read -p "请输入密钥地址：" ssl_certificate_key
|
||||||
|
if [[ -z $ssl_certificate_key ]];then
|
||||||
|
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "1.nginx(默认)"
|
||||||
|
read -p "请选择：" pick
|
||||||
|
bash "$(dirname $0)/acme/apply.sh" "nginx" "${domain}"
|
||||||
|
ssl_certificate="${HOME}/.acme.sh/${ssl_domain}_ecc/fullchain.cer"
|
||||||
|
ssl_certificate_key="${HOME}/.acme.sh/${ssl_domain}_ecc/${ssl_domain}.key"
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
declare name
|
||||||
|
read -p "请输入配置文件名,默认为域名：" name
|
||||||
|
if [[ -z $name ]]; then
|
||||||
|
name=$ssl_domain
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "工作方式"
|
||||||
|
echo "1.反向代理（默认）"
|
||||||
|
echo "2.静态文件"
|
||||||
|
read -p "请选择：" pick
|
||||||
|
declare path
|
||||||
|
if [[ $pick == 2 ]]; then
|
||||||
|
read -p "请输入要代理的站点路径" path
|
||||||
|
cat > "/etc/nginx/sites-available/${name}.conf" << EOF
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2; # 监听 443 端口并启用 SSL 和 HTTP/2
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# SSL 证书配置
|
||||||
|
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
||||||
|
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
||||||
|
ssl_protocols TLSv1.2 TLSv1.3; # 仅使用安全的 TLS 协议版本
|
||||||
|
ssl_ciphers HIGH:!aNULL:!MD5; # 安全的密码套件
|
||||||
|
ssl_prefer_server_ciphers on; # 优先使用服务器的密码套件
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
|
||||||
|
# HSTS（HTTP 严格传输安全）强制浏览器使用 HTTPS
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
|
||||||
|
# 设置文件传输的最大大小
|
||||||
|
client_max_body_size 100M; # 上传文件最大大小 (例如 100MB)
|
||||||
|
proxy_max_temp_file_size 1024m; # 代理最大临时文件大小
|
||||||
|
|
||||||
|
# 超时与缓冲设置
|
||||||
|
client_body_timeout 60s; # 等待客户端发送请求主体的超时时间
|
||||||
|
client_header_timeout 60s; # 等待客户端发送请求头的超时时间
|
||||||
|
send_timeout 60s; # 发送响应的超时时间
|
||||||
|
client_body_buffer_size 128k; # 上传缓冲区大小
|
||||||
|
proxy_buffer_size 4k; # 设置代理服务器响应的缓冲区大小
|
||||||
|
proxy_buffers 8 16k; # 代理服务器的缓冲区数和大小
|
||||||
|
proxy_busy_buffers_size 64k; # 忙碌代理缓冲区大小
|
||||||
|
large_client_header_buffers 4 16k; # 设置较大的客户端头部缓冲区，防止上传大文件时出现 413 错误
|
||||||
|
|
||||||
|
# 静态文件目录
|
||||||
|
root ${path};
|
||||||
|
index index.html index.htm;
|
||||||
|
|
||||||
|
# 日志
|
||||||
|
access_log /var/log/nginx/example.com_access.log;
|
||||||
|
error_log /var/log/nginx/example.com_error.log;
|
||||||
|
|
||||||
|
# 默认处理
|
||||||
|
location / {
|
||||||
|
try_files \$uri \$uri/ =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 防止访问隐藏文件（如 .git）
|
||||||
|
location ~ /\. {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 错误页面配置
|
||||||
|
error_page 404 /404.html;
|
||||||
|
location = /404.html {
|
||||||
|
root /var/www/example.com/html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTTP 到 HTTPS 重定向
|
||||||
|
server {
|
||||||
|
listen 80; # 监听 80 端口
|
||||||
|
server_name ${domain};
|
||||||
|
|
||||||
|
# 将所有 HTTP 请求重定向到 HTTPS
|
||||||
|
return 301 https://\$host\$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
EOF
|
||||||
|
else
|
||||||
|
read -p "请输入后端服务器的地址,如果只输入数字代表端口：" path
|
||||||
|
if [[ $path =~ [0-9]+ ]]; then
|
||||||
|
path="http://127.0.0.1:${path}"
|
||||||
|
fi
|
||||||
|
cat > "/etc/nginx/sites-available/${name}.conf" << EOF
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2; # 监听 443 端口，并启用 HTTP/2
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# SSL 证书配置
|
||||||
|
ssl_certificate ${ssl_certificate}; # 证书文件路径
|
||||||
|
ssl_certificate_key ${ssl_certificate_key}; # 证书密钥文件路径
|
||||||
|
ssl_protocols TLSv1.2 TLSv1.3; # 使用安全的 TLS 协议版本
|
||||||
|
ssl_ciphers HIGH:!aNULL:!MD5; # 安全密码套件
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
|
||||||
|
# 启用 SSL session 缓存和超时设置
|
||||||
|
ssl_session_cache shared:SSL:10m;
|
||||||
|
ssl_session_timeout 10m;
|
||||||
|
|
||||||
|
# 强制使用 HTTPS (HSTS)
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
|
||||||
|
# 日志设置
|
||||||
|
access_log /var/log/nginx/${name}_access.log;
|
||||||
|
error_log /var/log/nginx/${name}_error.log;
|
||||||
|
|
||||||
|
# 错误页面配置
|
||||||
|
error_page 404 /404.html;
|
||||||
|
location = /404.html {
|
||||||
|
root /var/www/example.com/html;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 设置文件传输的最大大小
|
||||||
|
client_max_body_size 100M; # 上传文件最大大小 (例如 100MB)
|
||||||
|
proxy_max_temp_file_size 1024m; # 代理最大临时文件大小
|
||||||
|
|
||||||
|
# 超时与缓冲设置
|
||||||
|
client_body_timeout 60s; # 等待客户端发送请求主体的超时时间
|
||||||
|
client_header_timeout 60s; # 等待客户端发送请求头的超时时间
|
||||||
|
send_timeout 60s; # 发送响应的超时时间
|
||||||
|
client_body_buffer_size 128k; # 上传缓冲区大小
|
||||||
|
proxy_buffer_size 4k; # 设置代理服务器响应的缓冲区大小
|
||||||
|
proxy_buffers 8 16k; # 代理服务器的缓冲区数和大小
|
||||||
|
proxy_busy_buffers_size 64k; # 忙碌代理缓冲区大小
|
||||||
|
large_client_header_buffers 4 16k; # 设置较大的客户端头部缓冲区，防止上传大文件时出现 413 错误
|
||||||
|
|
||||||
|
# 反向代理到后台应用 (常规 HTTP/HTTPS)
|
||||||
|
location / {
|
||||||
|
proxy_pass ${path}; # 反向代理到后端应用服务器
|
||||||
|
proxy_set_header Host \$host; # 保持原始主机头
|
||||||
|
proxy_set_header X-Real-IP \$remote_addr; # 传递客户端的真实 IP
|
||||||
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; # 传递代理链中的 IP
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme; # 传递协议（HTTP 或 HTTPS）
|
||||||
|
|
||||||
|
# 防止后端服务器返回不安全的内容
|
||||||
|
proxy_redirect off;
|
||||||
|
|
||||||
|
# 超时时间配置
|
||||||
|
proxy_connect_timeout 60s;
|
||||||
|
proxy_send_timeout 60s;
|
||||||
|
proxy_read_timeout 60s;
|
||||||
|
send_timeout 60s;
|
||||||
|
}
|
||||||
|
|
||||||
|
# WebSocket 反向代理到后台应用
|
||||||
|
location /ws {
|
||||||
|
proxy_pass ${path}; # 反向代理到 WebSocket 应用服务器
|
||||||
|
proxy_http_version 1.1; # WebSocket 必须使用 HTTP 1.1
|
||||||
|
proxy_set_header Upgrade \$http_upgrade; # 升级请求头，用于 WebSocket
|
||||||
|
proxy_set_header Connection "Upgrade"; # 持久连接，保持 WebSocket 连接
|
||||||
|
proxy_set_header Host \$host; # 保持原始主机头
|
||||||
|
proxy_set_header X-Real-IP \$remote_addr; # 传递客户端的真实 IP
|
||||||
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; # 传递代理链中的 IP
|
||||||
|
proxy_set_header X-Forwarded-Proto \$scheme; # 传递协议（HTTP 或 HTTPS）
|
||||||
|
|
||||||
|
# 超时时间配置 (WebSocket 是长连接)
|
||||||
|
proxy_connect_timeout 60s;
|
||||||
|
proxy_send_timeout 60s;
|
||||||
|
proxy_read_timeout 3600s; # WebSocket 长连接需较长读超时
|
||||||
|
send_timeout 60s;
|
||||||
|
}
|
||||||
|
|
||||||
|
# 错误页面配置
|
||||||
|
error_page 502 /502.html;
|
||||||
|
location = /502.html {
|
||||||
|
root /usr/share/nginx/html; # 错误页面路径
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# HTTP 到 HTTPS 重定向
|
||||||
|
server {
|
||||||
|
listen 80; # 监听 HTTP 80 端口
|
||||||
|
server_name ${domain}; # 替换为你的域名
|
||||||
|
|
||||||
|
# 将所有 HTTP 请求重定向到 HTTPS
|
||||||
|
return 301 https://\$host\$request_uri;
|
||||||
|
}
|
||||||
|
|
||||||
|
EOF
|
||||||
|
fi
|
||||||
|
ln -s "/etc/nginx/sites-available/${name}.conf" "/etc/nginx/sites-enabled" &> /dev/null
|
||||||
|
nginx -s reload &> /dev/null
|
||||||
|
echo "配置完成"
|
||||||
48
Config/Web/nginx/manage.sh
Normal file
48
Config/Web/nginx/manage.sh
Normal file
@ -0,0 +1,48 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
declare pick
|
||||||
|
echo "========$(basename $0 .sh)========"
|
||||||
|
echo "1.查看已有站点配置文件"
|
||||||
|
echo "2.删除站点配置文件"
|
||||||
|
read -p "请选择：" pick
|
||||||
|
case $pick in
|
||||||
|
'1')
|
||||||
|
declare -a site_arr
|
||||||
|
declare site_name
|
||||||
|
declare site_number=0
|
||||||
|
for i in "/etc/nginx/sites-available"/* ; do
|
||||||
|
if [[ $i == "/etc/nginx/sites-available/*" ]];then
|
||||||
|
echo "暂时没有配置文件"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
site_number=$(( site_number+1 ))
|
||||||
|
site_name=$(basename $i)
|
||||||
|
echo "${site_number}.${site_name}"
|
||||||
|
site_arr[$site_number]=$site_name
|
||||||
|
done
|
||||||
|
;;
|
||||||
|
'2')
|
||||||
|
declare -a site_arr
|
||||||
|
declare site_name
|
||||||
|
declare site_number=0
|
||||||
|
for i in "/etc/nginx/sites-available"/* ; do
|
||||||
|
if [[ $i == "/etc/nginx/sites-available/*" ]];then
|
||||||
|
echo "暂时没有配置文件"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
site_number=$(( site_number+1 ))
|
||||||
|
site_name=$(basename $i)
|
||||||
|
echo "${site_number}.${site_name}"
|
||||||
|
site_arr[$site_number]=$site_name
|
||||||
|
done
|
||||||
|
read -p "请输入要删除的序号,多个用 空格 隔开：" site_name
|
||||||
|
for i in $site_name ; do
|
||||||
|
if [[ $i =~ [1-${#site_arr[*]}] ]]; then
|
||||||
|
echo "开始删除 ${site_arr[$i]}"
|
||||||
|
rm -rf "/etc/nginx/sites-available/${site_arr[$i]}" &> /dev/null
|
||||||
|
rm -rf "/etc/nginx/sites-enabled/${site_arr[$i]}" &> /dev/null
|
||||||
|
echo "删除完成"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
echo "删除完成"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
17
Config/Web/nginx/test.sh
Normal file
17
Config/Web/nginx/test.sh
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
if ! command -v nginx &> /dev/null; then
|
||||||
|
if [[ -f "/usr/bin/apt-get" ]];then
|
||||||
|
apt-get update -y
|
||||||
|
apt-get install nginx -y
|
||||||
|
elif [[ -f "/usr/bin/apt" ]];then
|
||||||
|
apt update -y
|
||||||
|
apt install nginx -y
|
||||||
|
elif [[ -f "/usr/bin/pacman" ]];then
|
||||||
|
pacman -Syu --noconfirm
|
||||||
|
pacman -Sy --noconfirm nginx
|
||||||
|
else
|
||||||
|
echo "nginx未安装"
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
fi
|
||||||
Loading…
Reference in New Issue
Block a user