server/sa-charts
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

docker-swarm-review

Browse Source
This commit is contained in:
禹梦成
2026-05-13 15:23:46 +08:00
parent 33daa2864b
commit 95a34b2f89
128 changed files with 13062 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

59
docker-swarm-review/nginx-review-132/swarm/docker-compose.yml Normal file
View File

@@ -0,0 +1,59 @@
version: "3.8"
services:
nginx-review:
image: nginx:alpine
ports:
- target: 80
published: 80
protocol: tcp
mode: host
- target: 443
published: 443
protocol: tcp
mode: host
- target: 18888
published: 18888
protocol: tcp
mode: host
- target: 18889
published: 18889
protocol: tcp
mode: host
- target: 1180
published: 1180
protocol: tcp
mode: host
- target: 8888
published: 8888
protocol: tcp
mode: host
- target: 38888
published: 38888
protocol: tcp
mode: host
environment:
- TZ=Asia/Shanghai
volumes:
- /data/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- /data/nginx/sites:/etc/nginx/sites:ro
- /data/nginx/ssl.sino_assist.conf:/etc/nginx/ssl.sino_assist.conf:ro
- /data/nginx/ssl.conf:/etc/nginx/ssl.conf:ro
- /data/nginx/ssl:/etc/nginx/ssl:ro
- /opt/logs/nginx:/var/log/nginx
deploy:
replicas: 1
placement:
constraints:
- node.hostname == ZD-BAK-APP2
restart_policy:
condition: on-failure
update_config:
parallelism: 1
delay: 10s
networks:
- review
networks:
review:
external: true

14
docker-swarm-review/nginx-review-132/swarm/logrotate-nginx Normal file
View File

@@ -0,0 +1,14 @@
/opt/logs/nginx/*.log {
daily
rotate 90
dateext
dateformat -%Y%m%d
missingok
notifempty
compress
delaycompress
sharedscripts
postrotate
docker kill --signal=USR1 $(docker ps -qf name=nginx-review) 2>/dev/null || true
endscript
}

73
docker-swarm-review/nginx-review-132/swarm/nginx.conf Normal file
View File

@@ -0,0 +1,73 @@
worker_processes auto;
events {
worker_connections 10240;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
error_log /var/log/nginx/error.log warn;
client_header_buffer_size 512k;
large_client_header_buffers 4 512k;
client_max_body_size 500m;
sendfile on;
server_tokens off;
gzip on;
gzip_min_length 1k;
gzip_comp_level 3;
gzip_types text/plain application/javascript application/x-javascript text/javascript text/xml text/css;
gzip_disable "MSIE [1-6]\.";
gzip_vary on;
keepalive_timeout 6500;
proxy_connect_timeout 6000;
proxy_read_timeout 6000;
proxy_send_timeout 6000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 默认 server：拦截无匹配请求
server {
listen 80 default_server;
location / {
return 404;
}
}
include /etc/nginx/sites/*.conf;
}
stream {
upstream http_gateway {
server 127.0.0.1:18888;
}
upstream https_gateway {
server 127.0.0.1:18889;
}
map $ssl_preread_protocol $upstream {
default http_gateway;
"TLSv1.0" https_gateway;
"TLSv1.1" https_gateway;
"TLSv1.2" https_gateway;
"TLSv1.3" https_gateway;
}
server {
listen 8888;
listen 38888;
ssl_preread on;
proxy_pass $upstream;
}
}

95
docker-swarm-review/nginx-review-132/swarm/sites/crm1.conf Normal file
View File

@@ -0,0 +1,95 @@
server {
listen 80;
server_name crm1.sino-assist.com api1.sino-assist.com api-sit.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
# 中道汽车救援公众号
location /MP_verify_TyW3WkUF0gacMB4m.txt {
default_type text/html;
return 200 "TyW3WkUF0gacMB4m";
}
# 中道汽车服务服务号
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location / {
proxy_pass http://192.168.1.209:8080/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location /h5/supplier/dispatch {
proxy_pass http://192.168.1.209:8031/h5/supplier/dispatch;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location ^~ /dev/h5/rescue {
rewrite ^/dev/h5/rescue/(.*)$ /h5/client/$1 break;
proxy_pass http://192.168.1.209:8032;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location ^~ /dev/h5/rvc {
rewrite ^/dev/h5/rvc/(.*)$ /h5/rvc/$1 break;
proxy_pass http://192.168.1.209:8035;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/rvc/ {
proxy_pass http://192.168.1.209:8035/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/client/ {
proxy_pass http://192.168.1.209:8032/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /dev/h5/rentCar {
proxy_pass http://192.168.1.209:8034/dev/h5/rentCar;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}
server {
listen 80;
server_name portainer.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.209:9000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name oem-jlr.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.226:5868/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

75
docker-swarm-review/nginx-review-132/swarm/sites/crm2.conf Normal file
View File

@@ -0,0 +1,75 @@
server {
listen 80;
server_name api2.sino-assist.com interface.crm2.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /oss/minio/ {
proxy_set_header Host $http_host;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_pass http://192.168.3.132:28773/oss/minio/;
}
location ~ .*actuator.* {
deny all;
}
location / {
proxy_pass http://192.168.1.209:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name test-api-sh.do-dec.com test-api-nj.do-dec.com test-api-cd.do-dec.com test-api-wh.do-dec.com test-api-hz.do-dec.com;
location / {
proxy_pass http://192.168.1.209:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# cc.crm2 前端（https）
server {
include /etc/nginx/ssl.sino_assist.conf;
server_name cc.crm2.sino-assist.com crm2.sino-assist.com;
location / {
proxy_pass http://192.168.1.209:8081;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# http → https 跳转
server {
listen 80;
server_name cc.crm2.sino-assist.com crm2.sino-assist.com;
return 301 https://$server_name$request_uri;
}
server {
listen 80;
server_name stomp2.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.209:15674;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
}
}

27
docker-swarm-review/nginx-review-132/swarm/sites/fastdfs.conf Normal file
View File

@@ -0,0 +1,27 @@
server {
listen 18888;
listen 18889 ssl;
server_name file-gk.sino-assist.com;
include /etc/nginx/ssl.conf;
location /n1/ {
proxy_pass http://192.168.3.125:8080/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location / {
proxy_pass http://192.168.3.119:8888;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

242
docker-swarm-review/nginx-review-132/swarm/sites/git.conf Normal file
View File

@@ -0,0 +1,242 @@
server {
listen 80;
server_name jira.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8018/;
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_redirect off;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_buffers 32 4k;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
}
}
server {
listen 80;
server_name itsm.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /WW_verify_TWp375Kzd79EfP0l.txt {
default_type text/html;
return 200 "TWp375Kzd79EfP0l";
}
location / {
proxy_pass http://192.168.3.200:8013/;
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_redirect off;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_buffers 32 4k;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
}
}
server {
listen 80;
server_name wiki.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.101:8081;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
proxy_read_timeout 86400s;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_buffering off;
proxy_cache off;
}
}
server {
listen 80;
server_name vote.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.124:8089;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
proxy_read_timeout 86400s;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_buffering off;
proxy_cache off;
}
}
server {
listen 80;
server_name jira.sinoassist.com;
location / {
proxy_pass http://192.168.3.129:10880/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 1180;
location / {
proxy_pass http://192.168.3.140:8018/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name harbor.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8082/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name docker-mirror.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:5000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name git.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:3000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name maven.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8081/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name api-doc.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:7700/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name hr.sinoassist.com;
include /etc/nginx/ssl.conf;
location / {
proxy_pass http://192.168.3.200:8012;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name training.sino-assist.com;
include /etc/nginx/ssl.conf;
location / {
proxy_pass http://192.168.1.226:8090;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name csc.sino-assist.com;
location / {
proxy_pass http://192.168.1.161:8011;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name file.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.171:8088/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

14
docker-swarm-review/nginx-review-132/swarm/sites/oss.conf Normal file
View File

@@ -0,0 +1,14 @@
server {
listen 80;
server_name oss.sinoassist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.125:25773;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

70
docker-swarm-review/nginx-review-132/swarm/sites/pay.conf Normal file
View File

@@ -0,0 +1,70 @@
server {
listen 80;
server_name pay.sinoassist.com;
include /etc/nginx/ssl.conf;
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9216;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9226;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name pay-manager.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9217;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9227;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name pay-client.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9218;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9228;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

80
docker-swarm-review/nginx-review-132/swarm/sites/review.conf Normal file
View File

@@ -0,0 +1,80 @@
# review 后端接口（原经 3.110 → 3.132:18092 中转，现直连网关）
server {
listen 80;
server_name interface.review.sino-assist.com apireview.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.132:28092;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location ~ .*actuator.* {
deny all;
}
}
# review 前端
server {
include /etc/nginx/ssl.sino_assist.conf;
server_name cc.review.sino-assist.com ccreview.sino-assist.com;
location /MP_verify_TyW3WkUF0gacMB4m.txt {
default_type text/html;
return 200 "TyW3WkUF0gacMB4m";
}
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location /dev/h5/rescue/ {
proxy_pass http://192.168.1.209:8032/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /m/ {
return 301 https://api1.sino-assist.com/base/shortUrlMappings/$request_uri;
}
location /m/dev- {
return 301 https://api.sinoassist.com/base/shortUrlMappings/$request_uri;
}
location / {
proxy_pass http://192.168.3.132:8081;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# http → https 跳转
server {
listen 80;
server_name cc.review.sino-assist.com ccreview.sino-assist.com;
add_header Strict-Transport-Security max-age=15768000;
return 301 https://ccreview.sino-assist.com$request_uri;
}
server {
listen 80;
server_name jenkins.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.120:8081;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

43
docker-swarm-review/nginx-review-132/swarm/sites/uat.conf Normal file
View File

@@ -0,0 +1,43 @@
# http → https 跳转
server {
listen 80;
server_name uat.sino-assist.com api-uat.sino-assist.com api-pre.sino-assist.com;
return 301 https://$host$request_uri;
}
server {
server_name uat.sino-assist.com api-uat.sino-assist.com api-pre.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_cookie_path / "/; HttpOnly; Secure; SameSite=Strict";
proxy_pass http://192.168.3.126:8080/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location /h5/supplier/dispatch {
proxy_pass http://192.168.3.126:8031/h5/supplier/dispatch;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/client {
proxy_pass http://192.168.3.126:8032/h5/client;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /dev/h5/rentCar {
proxy_pass http://192.168.3.126:8034/dev/h5/rentCar;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}

32
docker-swarm-review/nginx-review-132/swarm/sites/wx.conf Normal file
View File

@@ -0,0 +1,32 @@
server {
listen 80;
server_name supplierwxtest.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /ws {
proxy_pass http://192.168.3.111:13000/ws;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
location / {
proxy_pass http://192.168.13.24:8081;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}
server {
listen 80;
server_name site.sinoassist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.10.2:8090;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}

60
docker-swarm-review/nginx-review-132/swarm/sites/zd_report.conf Normal file
View File

@@ -0,0 +1,60 @@
server {
listen 80;
server_name report.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /SinoGYS {
proxy_pass http://192.168.14.47/SinoGYS;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
location /SinoORG {
proxy_pass http://192.168.14.47/SinoORG;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
location / {
proxy_pass http://192.168.3.123:8080;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}
server {
listen 80;
server_name bi.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.123:4280;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}
server {
listen 80;
server_name bi.sinoassist.com;
include /etc/nginx/ssl.conf;
location /WW_verify_TWp375Kzd79EfP0l.txt {
default_type text/html;
return 200 "TWp375Kzd79EfP0l";
}
location / {
proxy_pass http://192.168.3.131:80;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}

8
docker-swarm-review/nginx-review-132/swarm/ssl.conf Normal file
View File

@@ -0,0 +1,8 @@
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/2026/sinoassist.com.pem;
ssl_certificate_key /etc/nginx/ssl/2026/sinoassist.com.key;
ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

8
docker-swarm-review/nginx-review-132/swarm/ssl.sino_assist.conf Normal file
View File

@@ -0,0 +1,8 @@
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/23368363_sino-assist.com_nginx/sino-assist.com.pem;
ssl_certificate_key /etc/nginx/ssl/23368363_sino-assist.com_nginx/sino-assist.com.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;