Site updated: 2022-10-27 14:21:36
This commit is contained in:
qinglong
232
atom.xml
232
atom.xml
@ -8,7 +8,7 @@
|
||||
<author>
|
||||
<name>Hito li</name>
|
||||
</author>
|
||||
<updated>2022-10-22T02:44:00.000Z</updated>
|
||||
<updated>2022-10-27T05:34:00.000Z</updated>
|
||||
<category term="hito" />
|
||||
<category term="無言" />
|
||||
<category term="博客" />
|
||||
@ -16,6 +16,110 @@
|
||||
<category term="笔记" />
|
||||
<category term="心得体会" />
|
||||
<category term="踩坑" />
|
||||
<entry>
|
||||
<id>https://blog.jingxiyuan.cn/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/</id>
|
||||
<title>极空间web端https直连nginx配置</title>
|
||||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/"/>
|
||||
<content type="html"><ul>
|
||||
<li>ip 直连一般都映射了 5055, 但是直接访问 5055 极空间只提供了 http 协议，如果希望使用 https 协议则必须使用其它端口进行访问。以下方案采用 nginx 反向代理实现，端口使用 10000 举例。</li>
|
||||
</ul>
|
||||
<ol>
|
||||
<li>需要先把 10000 端口在路由器上做好映射。</li>
|
||||
<li>证书生成好并放置到 nginx 上。（证书生成方法不做介绍请自行百度）</li>
|
||||
<li>http 跳转 https 配置</li>
|
||||
</ol>
|
||||
<pre><code class="language-conf">server &#123;
|
||||
if ($scheme = http) &#123;
|
||||
rewrite ^(.*)$ https://$host$1 permanent;
|
||||
&#125;
|
||||
&#125;
|
||||
</code></pre>
|
||||
<ol start="4">
|
||||
<li>web 端口监听配置</li>
|
||||
</ol>
|
||||
<pre><code class="language-conf">#极空间-web
|
||||
server &#123;
|
||||
listen 10000 ssl http2; #ipv4
|
||||
listen [::]:10000 ssl http2; #ipv6
|
||||
server_name xxx.xxx.com; #填写自己的域名，主域名或者子域名
|
||||
|
||||
#include /etc/nginx/conf.d/ssl/ssl_common.conf;
|
||||
ssl_certificate_key /etc/nginx/conf.d/ssl/xxx.key; #加密证书
|
||||
ssl_certificate /etc/nginx/conf.d/ssl/xxx.pem; #加密证书
|
||||
ssl_session_timeout 1d;
|
||||
ssl_session_cache shared:MozSSL:10m;
|
||||
ssl_session_tickets off;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
|
||||
ssl_prefer_server_ciphers on;
|
||||
|
||||
# 开启OCSP stapling
|
||||
ssl_stapling on;
|
||||
ssl_stapling_verify on;
|
||||
|
||||
client_max_body_size 128M;
|
||||
|
||||
add_header Strict-Transport-Security &quot;max-age=31536000; includeSubdomains; preload&quot;;
|
||||
|
||||
proxy_send_timeout 180s; #设置发送超时时间
|
||||
proxy_read_timeout 180s; #设置读取超时时间
|
||||
|
||||
# Prevent Information leaks
|
||||
proxy_hide_header X-Powered-By;
|
||||
proxy_hide_header Server;
|
||||
proxy_hide_header X-AspNetMvc-Version;
|
||||
proxy_hide_header X-AspNet-Version;
|
||||
|
||||
# http security headers
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header Pragma no-cache;
|
||||
add_header Cache-Control no-store;
|
||||
add_header X-XSS-Protection &quot;1; mode=block&quot;;
|
||||
add_header Referrer-Policy origin-when-cross-origin;
|
||||
add_header X-Permitted-Cross-Domain-Policies none;
|
||||
add_header X-Frame-Options SAMEORIGIN; #允许同域嵌套
|
||||
|
||||
# Add Security cookie flags
|
||||
proxy_cookie_path ~(.*) &quot;$1; SameSite=strict; secure; httponly&quot;;
|
||||
|
||||
# Path to the root of your installation
|
||||
location / &#123;
|
||||
proxy_intercept_errors on;
|
||||
proxy_max_temp_file_size 0;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
proxy_pass http://极空间内网ip:5055; #这里设置你自己要跳转的局域网应用;
|
||||
proxy_redirect http://域名:5055/home https://域名:10000/home; #极空间在登陆后会跳转到http协议的5055端口，所以要在此替换为https协议的10000端口
|
||||
&#125;
|
||||
|
||||
error_page 500 502 503 504 /500.html;
|
||||
error_page 400 404 /500.html;
|
||||
location = /500.html &#123;
|
||||
root /usr/share/nginx/html/; #错误html
|
||||
&#125;
|
||||
&#125;
|
||||
</code></pre>
|
||||
<ol start="5">
|
||||
<li>问题</li>
|
||||
</ol>
|
||||
<ul>
|
||||
<li>需要开启允许嵌套否则登陆后所有应用都是拒绝访问</li>
|
||||
<li>需要配置 proxy_redirect 替换响应 url，否则会跳转到默认 http 协议的 5055 端口</li>
|
||||
<li>如果配置 proxy_redirect 后无效可能需要清楚浏览器缓存（F12 - 网络 - 右键点击 url 区域 - 清除浏览器缓存）</li>
|
||||
</ul>
|
||||
</content>
|
||||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||||
<category term="Docker" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/" />
|
||||
<category term="技术分享" scheme="https://blog.jingxiyuan.cn/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/Docker/%E6%8A%80%E6%9C%AF%E5%88%86%E4%BA%AB/" />
|
||||
<category term="nginx" scheme="https://blog.jingxiyuan.cn/tags/nginx/" />
|
||||
<category term="极空间" scheme="https://blog.jingxiyuan.cn/tags/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||||
<category term="https" scheme="https://blog.jingxiyuan.cn/tags/https/" />
|
||||
<category term="web" scheme="https://blog.jingxiyuan.cn/tags/web/" />
|
||||
<updated>2022-10-27T05:34:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://blog.jingxiyuan.cn/2022/10/22/%E6%9E%81%E7%A9%BA%E9%97%B4Docker%E7%89%88%E9%9D%92%E9%BE%99%E9%9D%A2%E6%9D%BF%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE/</id>
|
||||
<title>极空间Docker版青龙面板安装与配置</title>
|
||||
@ -847,8 +951,8 @@ X-Frame-Options 三个参数:</p>
|
||||
</content>
|
||||
<category term="生活" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/" />
|
||||
<category term="心情" scheme="https://blog.jingxiyuan.cn/categories/%E7%94%9F%E6%B4%BB/%E5%BF%83%E6%83%85/" />
|
||||
<category term="郁闷" scheme="https://blog.jingxiyuan.cn/tags/%E9%83%81%E9%97%B7/" />
|
||||
<category term="心情" scheme="https://blog.jingxiyuan.cn/tags/%E5%BF%83%E6%83%85/" />
|
||||
<category term="郁闷" scheme="https://blog.jingxiyuan.cn/tags/%E9%83%81%E9%97%B7/" />
|
||||
<updated>2022-09-28T08:02:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
@ -1163,128 +1267,4 @@ server &#123;
|
||||
<category term="图片上传" scheme="https://blog.jingxiyuan.cn/tags/%E5%9B%BE%E7%89%87%E4%B8%8A%E4%BC%A0/" />
|
||||
<updated>2022-09-16T00:04:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://blog.jingxiyuan.cn/2022/09/14/Hexo%E5%AE%89%E8%A3%85%E6%91%B8%E7%B4%A2/</id>
|
||||
<title>Hexo安装摸索</title>
|
||||
<link rel="alternate" href="https://blog.jingxiyuan.cn/2022/09/14/Hexo%E5%AE%89%E8%A3%85%E6%91%B8%E7%B4%A2/"/>
|
||||
<content type="html"><h1 id="hexo博客安装"><a class="anchor" href="#hexo博客安装">#</a> hexo 博客安装</h1>
|
||||
<ol>
|
||||
<li>
|
||||
<p><span class="exturl" data-url="aHR0cHM6Ly9ub2RlanMub3JnL2VuLw==">安装 nodejs</span></p>
|
||||
</li>
|
||||
<li>
|
||||
<p><span class="exturl" data-url="aHR0cHM6Ly9naXQtc2NtLmNvbS8=">安装 git</span></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装 hexo（windows 需进入 git bash）</p>
|
||||
<p><code>npm install -g hexo-cli</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>初始化博客目录</p>
|
||||
<p><code>hexo init blog</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>进入博客目录</p>
|
||||
<p><code>cd blog</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>初始化 hexo 到博客目录</p>
|
||||
<p><code>npm install</code></p>
|
||||
</li>
|
||||
</ol>
|
||||
<h1 id="shoka主题安装"><a class="anchor" href="#shoka主题安装">#</a> shoka 主题安装</h1>
|
||||
<ol>
|
||||
<li>
|
||||
<p>下载主题 </p>
|
||||
<p><code>git clone </code> <span class="exturl" data-url="aHR0cHM6Ly9naXRodWIuY29tL2FtZWhpbWUvaGV4by10aGVtZS1zaG9rYS5naXQ=">https://github.com/amehime/hexo-theme-shoka.git</span> <code> ./themes/shoka</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>卸载 hexo-renderer-marked 以及别的 markdown 文件渲染器 </p>
|
||||
<p><code>npm un hexo-renderer-marked --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装（md 文件渲染器，压缩 css/js/html）</p>
|
||||
<p><code>npm i hexo-renderer-multi-markdown-it --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装（给生成的 css 文件们添加浏览器前缀)</p>
|
||||
<p><code>npm i hexo-autoprefixer --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装（站内搜索功能） </p>
|
||||
<p><code>npm i hexo-algoliasearch --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装（文章或站点字数及阅读时间统计）</p>
|
||||
<p><code>npm i hexo-symbols-count-time --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装（生成 Feed 文件）</p>
|
||||
<p><code>npm i hexo-feed --save</code></p>
|
||||
</li>
|
||||
</ol>
|
||||
<h1 id="hexo部分常用命令"><a class="anchor" href="#hexo部分常用命令">#</a> Hexo 部分常用命令</h1>
|
||||
<ul>
|
||||
<li>
|
||||
<p>清除静态文件</p>
|
||||
<p><code>hexo clean</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>生成静态文件</p>
|
||||
<p><code>hexo g</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>安装 git 推送插件 </p>
|
||||
<p><code>npm install hexo-deployer-git --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>推送静态文件到 git </p>
|
||||
<p><code>hexo d</code></p>
|
||||
</li>
|
||||
</ul>
|
||||
<h1 id="安装hexo-admin编写博客插件"><a class="anchor" href="#安装hexo-admin编写博客插件">#</a> 安装 hexo-admin（编写博客插件）</h1>
|
||||
<ul>
|
||||
<li>
|
||||
<p><code>npm install hexo-admin --save</code></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>hexo-admin 编辑 url</p>
|
||||
<p><a href="http://localhost:4000/admin"> <code>http://localhost:4000/admin</code> </a></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>settings 设置用户名、密码、Secret</p>
|
||||
<p><a href="http://localhost:4000/admin/#/settings"> <code>http://localhost:4000/admin/#/settings</code> </a></p>
|
||||
</li>
|
||||
<li>
|
||||
<p>把底部生成的配置拷入 hexo 配合文件中 (_config.yml)</p>
|
||||
</li>
|
||||
</ul>
|
||||
<pre><code class="language-yml">admin:
|
||||
username: username
|
||||
password_hash: xxxxxx
|
||||
secret: 'my super secret phrase' #用单引号包裹
|
||||
deployCommand: 'hexo_publish.sh' #windows用hexo_publish.bat，linux用hexo_publish.sh
|
||||
</code></pre>
|
||||
<h4 id="hexo_publishsh"><a class="anchor" href="#hexo_publishsh">#</a> hexo_publish.sh</h4>
|
||||
<pre><code class="language-bash">#!/bin/bash
|
||||
|
||||
hexo clean
|
||||
hexo g
|
||||
hexo d
|
||||
</code></pre>
|
||||
<h4 id="hexo_publishbat"><a class="anchor" href="#hexo_publishbat">#</a> hexo_publish.bat</h4>
|
||||
<pre><code class="language-bash">@echo off
|
||||
cd D:\blog
|
||||
d:
|
||||
@cmd /c &quot;hexo clean&amp;&amp; hexo g&amp;&amp;hexo d&amp;&amp;echo success&quot;
|
||||
</code></pre>
|
||||
</content>
|
||||
<category term="Linux" scheme="https://blog.jingxiyuan.cn/categories/Linux/" />
|
||||
<category term="服务" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||||
<category term="经验分享" scheme="https://blog.jingxiyuan.cn/categories/Linux/%E6%9C%8D%E5%8A%A1/%E7%BB%8F%E9%AA%8C%E5%88%86%E4%BA%AB/" />
|
||||
<category term="博客" scheme="https://blog.jingxiyuan.cn/tags/%E5%8D%9A%E5%AE%A2/" />
|
||||
<category term="Hexo" scheme="https://blog.jingxiyuan.cn/tags/Hexo/" />
|
||||
<category term="Hexo-admin" scheme="https://blog.jingxiyuan.cn/tags/Hexo-admin/" />
|
||||
<updated>2022-09-14T04:23:00.000Z</updated>
|
||||
</entry>
|
||||
</feed>
|
||||
|
||||
Reference in New Issue
Block a user