配置Nginx整合各个组件

安装nginx(根据喜好选择安装方式和版本)

系统自带的nginx版本比较低,这里提供yum安装最新稳定版的步骤。若想编译安装,请自行查阅文档。

新增nginx repo仓库地址

echo '[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=0
enabled=1'  > /etc/yum.repos.d/nginx.repo

安装nginx

sudo yum install  nginx  -y

修改配置文件

修改nginx 配置文件,vi /etc/nginx/nginx.conf

server {
    listen 80;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    location /luna/ {
        try_files $uri / /index.html;
        alias /opt/luna/;
    }

    location /media/ {
        add_header Content-Encoding gzip;
        root /opt/jumpserver/data/;
    }

    location /static/ {
        root /opt/jumpserver/data/;
    }

    location /socket.io/ {
        proxy_pass       http://localhost:5000/socket.io/;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location /guacamole/ {
        proxy_pass       http://localhost:8181/;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        access_log off;
    }

    location / {
        proxy_pass http://localhost:8080;
    }
}

检查配置并启动

nginx  -t
systemctl enable nginx
systemctl start nginx

防火墙开启端口

若是云服务器还需要单独在其安全策略上放行80端口(没备案的请改其他端口),公网才能访问。

sudo firewall-cmd --zone=public --add-port=80/tcp --permanent
sudo firewall-cmd  --reload

登录jumpserver

登录junmpserver,使用各个功能模块是否都正常。

results matching ""

    No results matching ""