Nginx代理Netdata
# 监控设置
upstream netdata {
# the Netdata server
server 127.0.0.1:15310;
keepalive 64;
}
server {
listen 14100 ssl;
listen [::]:14100 ssl;
server_name youcats.cn;
#隐藏nginx版本号
server_tokens off;
#ssl证书文件--youcats.cn
ssl_certificate path of youcats.cn_bundle.pem;
ssl_certificate_key path of youcats.cn.key;
#服务端要支持 协议配置
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
# 系统监控 -- 有前缀netdata时
# location = /netdata {
# return 301 /netdata/;
# }
# 系统监控反向代理 -- 有前缀netdata时
# location ~ /netdata/(?<ndpath>.*) {
# proxy_redirect off;
# proxy_set_header Host $host;
# proxy_set_header X-Forwarded-Host $host;
# proxy_set_header X-Forwarded-Server $host;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_http_version 1.1;
# proxy_pass_request_headers on;
# proxy_set_header Connection "keep-alive";
# proxy_store off;
# proxy_pass http://netdata/$ndpath$is_args$args;
# # 认证,可放在server层
# auth_basic "登录身份验证";
# auth_basic_user_file /etc/nginx/password/LuoSong;
# }
# 系统监控反向代理 -- 无前缀
location / {
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection "keep-alive";
proxy_store off;
proxy_pass http://netdata;
# 认证,可放在server层
auth_basic "登录身份验证";
auth_basic_user_file /etc/nginx/password/LuoSong;
}
}
Nginx鉴权
htpasswd -c /usr/local/nginx/auth/passwd admin #新增,后面输入密码
htpasswd -b /usr/local/nginx/auth/passwd admin pass #添加新用户密码
nginx配置
# 认证,可放在server层,此为location中
auth_basic "登录身份验证";
auth_basic_user_file /etc/nginx/password/wedding-photos;