nginx 代理失败

aganlin

我想用nginx配置域名访问halo，现在访问域名只能看到nginx的首页
halo已经可以正常通过ip加端口访问了
nginx和halo都是用docker-compose部署的
下面是nginx的配置


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;

    keepalive_timeout  65;

    upstream halo {
        server X.X.X.X:8090;        
    }
    upstream haloAdmin {
        server X.X.X.X:8090/admin; 
    }
    server {
        listen 80;
        listen [::]:80;
        server_name aganlin.com www.aganlin.com ;
        client_max_body_size 1024m;

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            proxy_pass http://halo;//添加
            expires      30d;
            error_log /dev/null;
            access_log off;
        }
    
        location ~ .*\.(js|css)?$
        {
            proxy_pass http://halo;//添加
            expires      12h;
            error_log /dev/null;
            access_log off; 
        }
        location / {
            proxy_pass http://halo;
        }
        location /admin {
            proxy_pass http://haloAdmin;
        }    
    }
}

cetr

aganlin haloAdmin 不需要配置，然后检查下配置完nginx重启没有，文件位置对不对，upstream 里的ip对不对

aganlin

cetr upsteam里的ip我直接写服务器的公网ip可以吗

aganlin

cetr nginx我已经删掉重新拉了，也还是不行。你说的文件位置，是nginx需要放在特定的位置吗？

cetr

aganlin 就是确保配置文件是否加载上了，别改半天没有加载conf文件

zyy2477

这个是我目前nginx 的配置，你可以参考一下

user http;
#worker_processes auto;
worker_processes 1;
error_log  logs/error.log error;
pid        /var/run/nginx.pid;
events {
    worker_connections  65535;
    multi_accept on;
    use epoll;
}
http {
    include mime.types;
    default_type application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                     '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  logs/access.log  main;
    server_tokens off;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay off;
    keepalive_timeout  10;
    client_header_timeout 10;
    client_body_timeout 10;
    reset_timedout_connection on;
    send_timeout 10;

    gzip on;
    gzip_disable "msie6";
    gzip_comp_level 4;
    gzip_min_length 1024;
    gzip_buffers 4 16K;
    gzip_vary on;
    gzip_types text/plain text/css application/json
               application/x-javascript text/xml application/xml
               application/xml+rss application/javascript text/javascript;

    proxy_cache_path /tmp levels=1:2 keys_zone=nuget-cache:5m max_size=5g inactive=60m use_temp_path=off;
    proxy_buffering on;
    proxy_buffers 8 8k;
    proxy_buffer_size 8k;
    proxy_busy_buffers_size 16k;
    proxy_limit_rate 0;
    proxy_request_buffering on;
    proxy_http_version 1.1;
    proxy_connect_timeout 5s;
    proxy_intercept_errors on;
    proxy_read_timeout 60s;
    proxy_send_timeout 60s;

    proxy_set_header   Host              $host:$server_port;
    proxy_set_header   Referer           $http_referer;
    proxy_set_header   Cookie            $http_cookie;
    proxy_set_header   X-Real-IP         $remote_addr;
    proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;

    upstream www {
        server 10.1.0.1:8090;
    }
    server {
        listen 80 ;
        server_name  www.seafog.cn;

        access_log /usr/local/nginx/logs/www.seafog.cn.access.log;
        error_log  /usr/local/nginx/logs/www.seafog.cn.error.log;

        client_max_body_size 5m;

        location ~ ^.*(js|css|ico|png|gif).* {
            expires 30d;                                       # 设置客户端缓存过期30天
            proxy_cache nuget-cache;                           # 启用 proxy_cache_path 的设置
            proxy_cache_lock on;                               # 启用缓存锁
            proxy_cache_lock_age 5s;                           # 缓存锁有效期5秒
            proxy_cache_lock_timeout 5s;                       # 等待缓存锁超时时间为5秒
            proxy_cache_methods GET HEAD;                      # 默认对 GET 和 HEAD 方法进行缓存
            proxy_cache_min_uses 1;                            # 响应数据至少被请求1次，才被缓存
            proxy_cache_bypass $http_pragma;                   # 客户端请求头包含 pragma 时不使用缓存
            proxy_cache_use_stale error timeout invalid_header # 出现指定条件时，使用已经过期缓存
                                  updating http_500 http_503
                                  http_403 http_404 http_429;
            proxy_cache_background_update on;                  # 允许使用过期的相应数据时，启用后台子请求用以更新过期缓存，并将过期的缓存响应数据返回给客户端
            proxy_cache_revalidate on;                         # 当缓存过期试，向后端服务器发起服务端校验
            proxy_cache_valid 200 301 302 5h;                  # 状态码200 301 302状态码的响应缓存5个小时
            proxy_cache_valid any 1m;                          # 其他状态码响应缓存1分钟
            proxy_ignore_headers Set-Cookie Cache-Control;     # 忽略源服务器不缓存的要求
            add_header X-Cache-Status $upstream_cache_status;  # 添加缓存请求状态标识
            proxy_pass http://www;
        }

        location / {
            proxy_pass http://www;
        }
    }
}

aganlin

zyy2477 可以看下你几个容器的docker-compose配置吗

aganlin

nginx和halo是在两个容器内需要做容器互联的吗

zyy2477

aganlin 两个容器，通过IP＋端口连接。halo 容器把端口开放出来，然后nginx容器反向代理给 halo映射出来的IP:端口

zyy2477

aganlin
这是 halo的

version: '3'
services:
  halo:
    image: halohub/halo:1.5.4
    hostname: halo
    container_name: halo
    ports:
      - "10.1.0.1:8090:8090"
    restart:
      always
    volumes:
      - $PWD/data:/root/.halo
      - /etc/localtime:/etc/localtime:ro
    environment:
      - SERVER_PORT=8090
      - SERVER_COMPRESSION_ENABLED=false
      - SPRING_DATASOURCE_DRIVER_CLASS_NAME=com.mysql.cj.jdbc.Driver
      #- SPRING_DATASOURCE_URL=jdbc:mysql://10.1.0.1:3306/blog_db?characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true
      - SPRING_DATASOURCE_URL=${MYSQL_URI}
      #- SPRING_DATASOURCE_DRIVER_CLASS_NAME=org.h2.Driver
      #- SPRING_DATASOURCE_URL=jdbc:h2:file:~/.halo/db/halo
      - SPRING_DATASOURCE_USERNAME=${MYSQL_USERNAME}
      - SPRING_DATASOURCE_PASSWORD=${MYSQL_PASSWORD}
      - HALO_ADMIN_PATH=admin
      #- HALO_CACHE=level
      #- HALO_CACHE=memory
      - HALO_CACHE=redis
      - SPRING_REDIS_PORT=${REDIS_PORT}
      - SPRING_REDIS_DATABASE=${REDIS_DATABASE}
      - SPRING_REDIS_HOST=${REDIS_HOST}
      - SPRING_REDIS_PASSWORD=${REDIS_PASSWORD}
      #- JVM_XMS=128m
      #- JVM_XMX=128m
      #- JVM_OPTS=-Xmx128m -Xms128m

这是nginx 的

version: '3'
services:
  nginx:
    #image: swr.cn-south-1.myhuaweicloud.com/zyy/nginx:0.4-gzip
    image: swr.cn-south-1.myhuaweicloud.com/zyy/nginx:0.4-gzip-brotli
    #image: nginx:1.18.0
    hostname: nginx
    container_name: nginx
    ports:
      - "80:80"
      - "443:443"
      - "10.1.0.1:9913:9913"
    restart:
      always
    volumes:
      - $PWD/nginx/conf:/usr/local/nginx/conf
      - $PWD/nginx/logs:/usr/local/nginx/logs
      - $PWD/nginx/html:/usr/local/nginx/html

这是docker ps看到的

# docker ps 
CONTAINER ID   IMAGE                                                        COMMAND                  CREATED        STATUS                  PORTS                                                               NAMES
37b96de1bf5f   halohub/halo:1.5.4                                           "/bin/sh -c 'java -X…"   12 days ago    Up 12 days              10.1.0.1:8090->8090/tcp                                             halo
e76605dd530c   swr.cn-south-1.myhuaweicloud.com/zyy/nginx:0.4-gzip-brotli   "supervisord -c /etc…"   3 weeks ago    Up 3 weeks              0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp, 10.1.0.1:9913->9913/tcp   nginx
53c9b9b23537   redis:5.0.10                                                 "docker-entrypoint.s…"   2 months ago   Up 2 months             10.1.0.1:6379->6379/tcp                                             redis
d37602585866   mysql:5.7.34                                                 "docker-entrypoint.s…"   4 months ago   Up 2 months             10.1.0.1:3306->3306/tcp, 33060/tcp                                  mysql

nginx 容器是我自己封装的，自己加了一些插件而已，没改变多少