nginx反向代理配置参考

>i 仅针对 docker 部署的

配置如下:
vim /etc/nginx/conf.d/mrdoc.conf
```
server {
  listen 80;
  listen 443 ssl;
  charset utf-8;
  server_name  www.mrdoc.fun mrdoc.fun;
  if ( $scheme = http ){
    return 301 https://$server_name$request_uri;
}
  include /etc/nginx/conf.d/ssl.conf; # 证书配置,可酌情删减!
  access_log /var/log/mrdoc.log;
  client_max_body_size    80m;

location / {
proxy_set_header HOST $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_pass http://127.0.0.1:10086;
}
}
```

ssl.conf

```
# ssl on;
# listen 443 ssl;
ssl_certificate       /jonnyan404/.acme.sh/mrdoc.fun/fullchain.cer;
ssl_certificate_key   /jonnyan404/.acme.sh/mrdoc.fun/mrdoc.fun.key;

#ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # 配置在http区块,增加评分.
#ssl_prefer_server_ciphers on; # 配置在http区块,增加评分.

# openssl dhparam -out /etc/ssl/private/dhparam.pem 2048
#ssl_dhparam /etc/ssl/private/dhparam.pem;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
```