server {
listen 80;
listen [::]:80; # 同时监听 IPv6
server_name *.lovekf.cn; # 匹配所有子域名
location / {
proxy_pass http://127.0.0.1:7080; # 代理到本地 7080 端口
proxy_redirect http://$host/ http://$http_host/; # 重定向修正
proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 代理链 IP
proxy_set_header Host $host; # 传递原始 Host 头
}
}
# HTTPS 配置
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name *.lovekf.cn;
ssl_certificate /www/server/panel/vhost/nginx/lovekf.cn/fullchain.pem;
ssl_certificate_key /www/server/panel/vhost/nginx/lovekf.cn/privkey.key;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d;
client_max_body_size 50m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
location / {
proxy_pass http://127.0.0.1:7080;
proxy_ssl_server_name on;
proxy_ssl_verify off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
# proxy_buffer_size 128k;
# proxy_buffers 8 256k;
}
}