LuoSong
LuoSong
Published on 2023-09-19 / 31 Visits
0
0

Nginx代理Netdata

Nginx代理Netdata

# 监控设置
upstream netdata {
    # the Netdata server
    server 127.0.0.1:15310;
    keepalive 64;
}

server {
    listen 14100 ssl;
    listen [::]:14100 ssl;
    server_name youcats.cn;

    #隐藏nginx版本号
    server_tokens off;
    #ssl证书文件--youcats.cn
    ssl_certificate path of youcats.cn_bundle.pem;
    ssl_certificate_key path of youcats.cn.key;
    #服务端要支持 协议配置
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  5m;

    # 系统监控 -- 有前缀netdata时
    # location = /netdata {
    #   return 301 /netdata/;
    # }

    # 系统监控反向代理 -- 有前缀netdata时
    # location ~ /netdata/(?<ndpath>.*) {
    #   proxy_redirect off;
    #   proxy_set_header Host $host;
    #   proxy_set_header X-Forwarded-Host $host;
    #   proxy_set_header X-Forwarded-Server $host;
    #   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    #   proxy_http_version 1.1;
    #   proxy_pass_request_headers on;
    #   proxy_set_header Connection "keep-alive";
    #   proxy_store off;
    #   proxy_pass http://netdata/$ndpath$is_args$args;

    #   # 认证,可放在server层
    #   auth_basic "登录身份验证";
    #   auth_basic_user_file /etc/nginx/password/LuoSong;
    # }

    # 系统监控反向代理 -- 无前缀
    location / {
      proxy_redirect off;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-Server $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_http_version 1.1;
      proxy_pass_request_headers on;
      proxy_set_header Connection "keep-alive";
      proxy_store off;
      proxy_pass http://netdata;

      # 认证,可放在server层
      auth_basic "登录身份验证";
      auth_basic_user_file /etc/nginx/password/LuoSong;
    }
}

Nginx鉴权

htpasswd -c /usr/local/nginx/auth/passwd admin #新增,后面输入密码
htpasswd -b /usr/local/nginx/auth/passwd admin pass #添加新用户密码
nginx配置
# 认证,可放在server层,此为location中
auth_basic "登录身份验证";
auth_basic_user_file /etc/nginx/password/wedding-photos;

Comment