docker-swarm-review

docker-swarm-review/nginx-proxy-simple/crm1.conf

@@ -0,0 +1,68 @@
+
+server {
+  listen 8080;
+  server_name api1.sino-assist.com api2.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://ss208_sa-gateway_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location ~ .*actuator.* {
+        deny all;
+  }
+
+}
+
+
+server {
+  listen 8080;
+  server_name crm1.sino-assist.com crm2.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://crm1_ss_sa-cc_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /nacos/ {
+  	proxy_pass  http://crm1_nacos_server:8848/nacos/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location /xxl-job-admin {
+  	proxy_pass  http://crm1_xxl_job_server:8080/xxl-job-admin;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /boot-admin/ {
+  	proxy_pass  http://ss209_boot-admin_svc:8080/boot-admin/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+
+  }
+  location /mq/ {
+  	proxy_pass  http://crm1_rabbitmq_stats:15672/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+}

docker-swarm-review/nginx-proxy-simple/deploy.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+
+# 在 192.168.3.132 上执行
+
+# 1. 创建配置目录
+mkdir -p /data/nginx-proxy
+
+# 2. 写入 nginx 配置
+cat > /data/nginx-proxy/nginx.conf << 'EOF'
+worker_processes auto;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+    sendfile      on;
+    keepalive_timeout 65;
+    client_max_body_size 100M;
+
+    server {
+        listen 8080;
+
+        # 前端
+        location / {
+            proxy_pass http://192.168.3.132:8081/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+        # 后端网关
+        location ~ ^/(common|order|supplier|contract|base|export-app|auth|user|system|api|ws|return|returnVehicle|returnOrder|supplierManage|agg-api|zgs|gps|data-search)/ {
+            proxy_pass http://192.168.3.132:28092;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+    }
+}
+EOF
+
+# 3. 启动 nginx 容器
+docker run -d \
+  --name nginx-proxy \
+  --restart always \
+  -p 8080:8080 \
+  -v /data/nginx-proxy/nginx.conf:/etc/nginx/nginx.conf:ro \
+  nginx:alpine

docker-swarm-review/nginx-proxy-simple/docker-compose.yml

@@ -0,0 +1,26 @@
+version: '3.8'
+
+services:
+  nginx-proxy:
+    image: nginx:alpine
+    ports:
+      - '8080:8080'
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+    environment:
+      - TZ=Asia/Shanghai
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+        delay: 5s
+        max_attempts: 3
+      placement:
+        constraints:
+          - node.labels.review_nginx_proxy==1
+
+networks:
+  default:
+    name: review
+    external: true

docker-swarm-review/nginx-proxy-simple/nginx.conf

@@ -0,0 +1,35 @@
+worker_processes auto;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+    sendfile      on;
+    keepalive_timeout 65;
+    client_max_body_size 100M;
+
+    server {
+        listen 8080;
+
+        # 前端
+        location / {
+            proxy_pass http://192.168.3.132:8081/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+        # 后端网关 - 所有 API 请求
+        location ~ ^/(common|order|supplier|contract|base|export-app|auth|user|system|api|ws|return|returnVehicle|returnOrder|supplierManage|agg-api|zgs|gps|data-search)/ {
+            proxy_pass http://192.168.3.132:28092;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+    }
+}

docker-swarm-review/nginx-proxy-simple/review.conf

@@ -0,0 +1,68 @@
+
+server {
+  listen 8080;
+  server_name apireview.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://ss132_sa-gateway_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location ~ .*actuator.* {
+        deny all;
+  }
+
+}
+
+
+server {
+  listen 8080;
+  server_name ccreview.sino-assist.com;
+
+  location / {
+  	proxy_pass  http://review_ss_sa-cc_svc:8080/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /nacos/ {
+  	proxy_pass  http://review_nacos_nacos1:8848/nacos/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location /xxl-job-admin {
+  	proxy_pass  http://review_xxl_job_server:8080/xxl-job-admin;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+
+  location /boot-admin/ {
+  	proxy_pass  http://ss132_boot-admin_svc:8080/boot-admin/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+
+  }
+  location /mq/ {
+  	proxy_pass  http://review_rabbitmq_stats:15672/;
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+
+  }
+}

docker-swarm-review/nginx-proxy-simple/review_temp.conf

@@ -0,0 +1,126 @@
+server {
+    listen       80;
+    server_name   crm1.sino-assist.com  api1.sino-assist.com api-sit.sino-assist.com;
+
+    include ssl.sino_assist.conf;
+
+
+    # 中道汽车救援公众号
+    location /MP_verify_TyW3WkUF0gacMB4m.txt {
+        default_type    text/html;
+        return 200 "TyW3WkUF0gacMB4m";
+    }
+
+    # 中道汽车服务 服务号
+    location /MP_verify_WjQInvWDvPvfZvL0.txt {
+        default_type    text/html;
+        return 200 "WjQInvWDvPvfZvL0";
+    }
+
+
+
+
+    location / {
+
+         proxy_pass  http://192.168.1.209:8080/;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+
+         if ($request_filename ~ .*\.(htm|html)$)
+           {
+             add_header Cache-Control no-cache;
+           }
+    }
+
+    location /h5/supplier/dispatch {
+        proxy_pass  http://192.168.1.209:8031/h5/supplier/dispatch;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         client_max_body_size    200m;
+       }
+
+     location ^~ /dev/h5/rescue {
+         rewrite ^/dev/h5/rescue/(.*)$ /h5/client/$1 break;  # [2,5](@ref)
+
+         proxy_pass  http://192.168.1.209:8032;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         client_max_body_size    200m;
+       }
+
+
+
+     location /h5/client/ {
+
+         proxy_pass  http://192.168.1.209:8032/;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         client_max_body_size    200m;
+       }
+     location /dev/h5/rentCar {
+
+         proxy_pass  http://192.168.1.209:8034/dev/h5/rentCar;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         client_max_body_size    200m;
+       }
+
+
+}
+
+server {
+    listen       80;
+    server_name   portainer.sino-assist.com;
+
+    include ssl.sino_assist.conf;
+
+    location / {
+
+         proxy_pass  http://192.168.1.209:9000/;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         if ($request_filename ~ .*\.(htm|html)$)
+           {
+             add_header Cache-Control no-cache;
+           }
+    }
+}
+
+server {
+    listen       80;
+    server_name   oem-jlr.sino-assist.com;
+
+    include ssl.sino_assist.conf;
+
+    location / {
+
+         proxy_pass  http://192.168.1.226:5868/;
+         proxy_set_header   Host $host;
+         proxy_set_header   X-Real-IP $remote_addr;
+         proxy_set_header   X-Forwarded-Host $server_name;
+         proxy_set_header   X-Forwarded-For
+         $proxy_add_x_forwarded_for;
+         if ($request_filename ~ .*\.(htm|html)$)
+           {
+             add_header Cache-Control no-cache;
+           }
+    }
+}