设为首页收藏本站
切换到窄版

爬行的蜗牛

 找回密码
 立即注册

QQ登录

只需一步，快速开始

搜索
热搜: golang Linux PHP
爬行的蜗牛»论坛 › 个人专用 › 其他相关知识 › Nginx反向代理github
返回列表 发新帖
查看: 1776|回复: 8

Nginx反向代理github

[复制链接]
yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
发表于 2023-10-9 22:23:21 | 显示全部楼层 |阅读模式
github.com
  1. upstream github {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name hub.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/hub.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/hub.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/hub.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31.     gzip on;
  32.     gzip_min_length 1k;
  33.     gzip_buffers 4 16k;
  34.     gzip_http_version 1.1;
  35.     gzip_comp_level 2;
  36.     gzip_vary on;
  37.     gzip_proxied any; # test required
  38.     gzip_types
  39.         text/plain
  40.         text/css
  41.         text/js
  42.         text/xml
  43.         text/javascript
  44.         application/javascript
  45.         application/json
  46.         application/xml
  47.         application/rss+xml
  48.         image/svg+xml;

  50.     # SSL
  51.     location ~ \.well-known {
  52.         allow all;
  53.     }

  55.     # releases download
  56.     location ~ ^/[^/]+/[^/]+/releases/download/ {
  57.         return 301 https://download.205b.com$request_uri;
  58.     }

  60.     # archive download
  61.     location ~ ^/[^/]+/[^/]+/archive/ {
  62.         return 301 https://archive.205b.com$request_uri;
  63.     }
  64.    
  65.     location ~ ^/[^/]+/[^/]+/suites/[^/]+/artifacts/ {
  66.         return 301 https://download.205b.com$request_uri;
  67.     }

  69.     # Fuck Search Engine
  70.     location /robots.txt {
  71.         allow all;
  72.     }
  73.    
  74.     location / {
  75.         proxy_hide_header referrer-policy;
  76.         proxy_hide_header content-security-policy;
  77.         proxy_hide_header Strict-Transport-Security;
  78.         proxy_hide_header x-pjax-url;

  80.         proxy_set_header Host github.com;
  81.         proxy_set_header Accept-Encoding "";
  82.         proxy_set_header Referer https://github.com/;
  83.         proxy_set_header Origin https://github.com;
  84.         #proxy_set_header Connection "";

  86.         add_header x-pjax-url "https://hub.205b.com$request_uri";

  88.         proxy_http_version 1.1;
  89.         proxy_connect_timeout 10s;
  90.         proxy_read_timeout 10s;
  91.         
  92.         # Not supported when installed from Debian source
  93.         # proxy_socket_keepalive on;
  94.         
  95.         proxy_ssl_server_name on;
  96.         
  97.         sub_filter ""https://raw.githubusercontent.com" ""https://raw.205b.com";
  98.         sub_filter ""https://github.com" ""https://hub.205b.com";
  99.         sub_filter ""https://github.githubassets.com" ""https://assets.205b.com";
  100.         sub_filter ""https://github.githubassets.com" ""https://assets.205b.com";
  101.         sub_filter ""https://api.github.com" ""https://api.205b.com";
  102.         sub_filter ""https://user-images.githubusercontent.com" ""https://user-images.205b.com";
  103.         sub_filter ""https://customer-stories-feed.github.com" ""https://customer-stories-feed.205b.com";
  104.         sub_filter ""https://avatars.githubusercontent.com" ""https://avatars.205b.com";
  105.         sub_filter_once off;
  106.         
  107.         proxy_cookie_domain github.com hub.205b.com;
  108.         proxy_redirect https://avatars.githubusercontent.com https://avatars.205b.com;
  109.         proxy_redirect https://github.com https://hub.205b.com;
  110.         proxy_redirect https://raw.githubusercontent.com https://raw.205b.com;
  111.         proxy_redirect https://github.githubassets.com https://assets.205b.com;
  112.         proxy_redirect https://customer-stories-feed.github.com https://customer-stories-feed.205b.com;
  113.         proxy_redirect https://user-images.githubusercontent.com https://user-images.205b.com;
  114.         proxy_redirect https://codeload.github.com https://codeload.205b.com;
  115.         proxy_redirect https://api.github.com https://api.205b.com;

  117.         proxy_pass https://github;
  118.     }
  119.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  120.     #error_page 404 /404.html;
  121.     #error_page 502 /502.html;
  122.     #ERROR-PAGE-END

  124.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  125.    

  127.         #清理缓存规则

  129.     location ~ /purge(/.*) {
  130.         proxy_cache_purge cache_one $host$1$is_args$args;
  131.         #access_log  /www/wwwlogs/hub.205b.com_purge_cache.log;
  132.     }
  133.         #引用反向代理规则，注释后配置的反向代理将无效
  134.         include /www/server/panel/vhost/nginx/proxy/hub.205b.com/*.conf;

  136.         include enable-php-00.conf;
  137.     #PHP-INFO-END

  139.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  140.     include /www/server/panel/vhost/rewrite/hub.205b.com.conf;
  141.     #REWRITE-END

  143.     #禁止访问的文件或目录
  144.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  145.     {
  146.         return 404;
  147.     }

  149.     #一键申请SSL证书验证目录相关设置
  150.     location ~ \.well-known{
  151.         allow all;
  152.     }

  154.     #禁止在证书验证目录放入敏感文件
  155.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  156.         return 403;
  157.     }

  159.     access_log  /www/wwwlogs/hub.205b.com.log;
  160.     error_log  /www/wwwlogs/hub.205b.com.error.log;
  161. }
复制代码


回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:23:59 | 显示全部楼层
raw.github.com
  1. upstream rawgithub {
  2.     server raw.githubusercontent.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name raw.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/raw.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/raw.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/raw.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31. error_page 497  https://$host$request_uri;
  32. # SSL
  33.     location ~ \.well-known {
  34.         allow all;
  35.     }

  37.     # Fuck Search Engine
  38.     location /robots.txt {
  39.         allow all;
  40.     }
  41.    
  42.     location / {
  43.         valid_referers none blocked *.fastgit.xyz *.fastgit.org raw.githubusercontent.com github.com;
  44.         if ($invalid_referer){
  45.             return 403;
  46.         }
  47.         proxy_hide_header content-security-policy;
  48.         proxy_hide_header Strict-Transport-Security;
  49.         proxy_hide_header set-cookie;
  50.         proxy_hide_header x-pjax-url;

  52.         proxy_set_header Host raw.githubusercontent.com;
  53.         # proxy_set_header Connection "";

  55.         add_header X-FastGit-Node "dogyun-de-1";

  57.         proxy_http_version 1.1;
  58.         proxy_connect_timeout 5s;
  59.         proxy_read_timeout 5s;

  61.         proxy_pass https://rawgithub;
  62.     }

  64.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  65.     #error_page 404 /404.html;
  66.     #error_page 502 /502.html;
  67.     #ERROR-PAGE-END

  69.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  70.     include enable-php-00.conf;
  71.     #PHP-INFO-END

  73.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  74.     include /www/server/panel/vhost/rewrite/raw.205b.com.conf;
  75.     #REWRITE-END

  77.     #禁止访问的文件或目录
  78.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  79.     {
  80.         return 404;
  81.     }

  83.     #一键申请SSL证书验证目录相关设置
  84.     location ~ \.well-known{
  85.         allow all;
  86.     }

  88.     #禁止在证书验证目录放入敏感文件
  89.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  90.         return 403;
  91.     }

  93.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  94.     {
  95.         expires      30d;
  96.         error_log /dev/null;
  97.         access_log /dev/null;
  98.     }

  100.     location ~ .*\.(js|css)?$
  101.     {
  102.         expires      12h;
  103.         error_log /dev/null;
  104.         access_log /dev/null;
  105.     }
  106.     access_log  /www/wwwlogs/raw.205b.com.log;
  107.     error_log  /www/wwwlogs/raw.205b.com.error.log;
  108. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:24:30 | 显示全部楼层
download.github.com
  1. upstream GithubDownload {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name download.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/download.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/download.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/download.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31.     error_page 497  https://$host$request_uri;
  32.    

  34.     # SSL
  35.     location ~ \.well-known{
  36.         allow all;
  37.     }
  38.    
  39.     location / {

  41.     }
  42.    
  43.     location ~ ^/[^/]+/[^/]+/releases(/latest)?/download/ {
  44.         proxy_cache_valid 206 120m;
  45.         proxy_cache_valid 200 120m;
  46.         recursive_error_pages on;
  47.         proxy_pass https://GithubDownload;
  48.         proxy_intercept_errors on;
  49.         error_page 301 302 307 = @handle_redirect;
  50.     }
  51.    
  52.     location ~ ^/[^/]+/[^/]+/suites/[^/]+/artifacts/ {
  53.         proxy_cache_valid 206 120m;
  54.         proxy_cache_valid 200 120m;
  55.         recursive_error_pages on;
  56.         proxy_pass https://GithubDownload;
  57.         proxy_intercept_errors on;
  58.         error_page 301 302 307 = @handle_redirect;
  59.     }
  60.    
  61.     location ~ ^/[^/]+/[^/]+/archive/ {
  62.         return 301 https://download.205b.com$request_uri;
  63.     }

  65.     location @handle_redirect {
  66.         resolver 8.8.8.8;
  67.         recursive_error_pages on;
  68.         set $saved_redirect_location '$upstream_http_location';
  69.         proxy_pass $saved_redirect_location;
  70.         proxy_intercept_errors on;
  71.         error_page 301 302 307 = @handle_redirect;
  72.     }
  73.    
  74.     # Block search engine
  75.     if ($http_user_agent ~* "qihoobot|Baiduspider|Bingbot|Googlebot|Googlebot-Mobile|Googlebot-Image|Mediapartners-Google|Adsbot-Google|Feedfetcher-Google|Yahoo! Slurp|Yahoo! Slurp China|YoudaoBot|Sosospider|Sogou spider|Sogou web spider|MSNBot|ia_archiver|Tomato Bot") {
  76.         return 403;
  77.     }
  78.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  79.     #error_page 404 /404.html;
  80.     #error_page 502 /502.html;
  81.     #ERROR-PAGE-END

  83.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  84.     include enable-php-00.conf;
  85.     #PHP-INFO-END

  87.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  88.     include /www/server/panel/vhost/rewrite/download.205b.com.conf;
  89.     #REWRITE-END

  91.     #禁止访问的文件或目录
  92.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  93.     {
  94.         return 404;
  95.     }

  97.     #一键申请SSL证书验证目录相关设置
  98.     location ~ \.well-known{
  99.         allow all;
  100.     }

  102.     #禁止在证书验证目录放入敏感文件
  103.   #  if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  104.    #     return 403;
  105.     #}
  106. #以下禁止注释掉了，以前没注释掉
  107.     #location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  108.     #{
  109.      #   expires      30d;
  110.       #  error_log /dev/null;
  111.        # access_log /dev/null;
  112.   #  }

  114.    # location ~ .*\.(js|css)?$
  115.     #{
  116.     #    expires      12h;
  117.      #   error_log /dev/null;
  118.       #  access_log /dev/null;
  119.   #  }
  120.     access_log  /www/wwwlogs/download.205b.com.log;
  121.     error_log  /www/wwwlogs/download.205b.com.error.log;
  122. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:25:13 | 显示全部楼层
GithubArchive
  1. upstream GithubArchive {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }

  6. server
  7. {
  8.     listen 80;
  9.                 listen 443 ssl http2;
  10.     server_name archive.205b.com;
  11.     index index.php index.html index.htm default.php default.htm default.html;
  12.     root /www/wwwroot/archive.205b.com;

  14.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  15.     #error_page 404/404.html;
  16.     #HTTP_TO_HTTPS_START
  17.     if ($server_port !~ 443){
  18.         rewrite ^(/.*)$ https://$host$1 permanent;
  19.     }
  20.     #HTTP_TO_HTTPS_END
  21.     ssl_certificate    /www/server/panel/vhost/cert/archive.205b.com/fullchain.pem;
  22.     ssl_certificate_key    /www/server/panel/vhost/cert/archive.205b.com/privkey.pem;
  23.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  24.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  25.     ssl_prefer_server_ciphers on;
  26.     ssl_session_cache shared:SSL:10m;
  27.     ssl_session_timeout 10m;
  28.     add_header Strict-Transport-Security "max-age=31536000";
  29.     error_page 497  https://$host$request_uri;

  31.     #SSL-END
  32.     error_page 497  https://$host$request_uri;

  34.     # SSL
  35.     location ~ \.well-known{
  36.         allow all;
  37.     }
  38.    
  39.     location / {

  41.     }
  42.    
  43.     location ~ ^/[^/]+/[^/]+/releases(/latest)?/download/ {
  44.         return 301 https://download.205b.com$request_uri;
  45.     }
  46.    
  47.     location ~ ^/[^/]+/[^/]+/suites/[^/]+/artifacts/ {
  48.         return 301 https://download.205b.com$request_uri;
  49.     }
  50.    
  51.     location ~ ^/[^/]+/[^/]+/archive/ {
  52.         recursive_error_pages on;
  53.         proxy_pass https://GithubArchive;
  54.         proxy_intercept_errors on;
  55.         error_page 301 302 307 = @handle_redirect;
  56.     }

  58.     location @handle_redirect {
  59.         resolver 8.8.8.8;
  60.         recursive_error_pages on;
  61.         set $saved_redirect_location '$upstream_http_location';
  62.         proxy_pass $saved_redirect_location;
  63.         proxy_intercept_errors on;
  64.         error_page 301 302 307 = @handle_redirect;
  65.     }
  66.    
  67.     # Block search engine
  68.     if ($http_user_agent ~* "qihoobot|Baiduspider|Bingbot|Googlebot|Googlebot-Mobile|Googlebot-Image|Mediapartners-Google|Adsbot-Google|Feedfetcher-Google|Yahoo! Slurp|Yahoo! Slurp China|YoudaoBot|Sosospider|Sogou spider|Sogou web spider|MSNBot|ia_archiver|Tomato Bot") {
  69.         return 403;
  70.     }
  71.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  72.     #error_page 404 /404.html;
  73.     #error_page 502 /502.html;
  74.     #ERROR-PAGE-END

  76.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  77.     include enable-php-00.conf;
  78.     #PHP-INFO-END

  80.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  81.     include /www/server/panel/vhost/rewrite/archive.205b.com.conf;
  82.     #REWRITE-END

  84.     #禁止访问的文件或目录
  85.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  86.     {
  87.         return 404;
  88.     }

  90.     #一键申请SSL证书验证目录相关设置
  91.     location ~ \.well-known{
  92.         allow all;
  93.     }

  95.     #禁止在证书验证目录放入敏感文件
  96.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  97.         return 403;
  98.     }

  100.   #  location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  101.   #  {
  102.    #     expires      30d;
  103.     #    error_log /dev/null;
  104.      #   access_log /dev/null;
  105.   #  }

  107.    # location ~ .*\.(js|css)?$
  108.   #  {
  109.    #     expires      12h;
  110.     #    error_log /dev/null;
  111.      #   access_log /dev/null;
  112.   #  }
  113.     access_log  /www/wwwlogs/archive.205b.com.log;
  114.     error_log  /www/wwwlogs/archive.205b.com.error.log;
  115. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:26:25 | 显示全部楼层
assets.github.com
  1. upstream assetsgithub {
  2.     server assets.github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name assets.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/assets.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/assets.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/assets.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31.     error_page 497  https://$host$request_uri;

  33.     # SSL
  34.     location ~ \.well-known {
  35.         allow all;
  36.     }
  37.    
  38.     # Fuck Search Engine
  39.     location /robots.txt {
  40.         allow all;
  41.     }
  42.    
  43.     #PROXY-START/
  44.     location ~* \.(php|jsp|cgi|asp|aspx)$
  45.     {
  46.         proxy_pass https://github.githubassets.com;
  47.         proxy_set_header Host github.githubassets.com;
  48.         proxy_set_header X-Real-IP $remote_addr;
  49.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  50.         proxy_set_header REMOTE-HOST $remote_addr;
  51.     }
  52.    
  53.     location /
  54.     {
  55.         proxy_pass https://github.githubassets.com;
  56.         proxy_set_header Host github.githubassets.com;
  57.         proxy_set_header X-Real-IP $remote_addr;
  58.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  59.         proxy_set_header REMOTE-HOST $remote_addr;
  60.         add_header X-Cache $upstream_cache_status;
  61.         proxy_ignore_headers Set-Cookie Cache-Control expires;
  62.         # proxy_cache cache_one;
  63.         proxy_cache_key $host$uri$is_args$args;
  64.         proxy_cache_valid 200 304 301 302 480m;
  65.         expires 12h;
  66.     }
  67.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  68.     #error_page 404 /404.html;
  69.     #error_page 502 /502.html;
  70.     #ERROR-PAGE-END

  72.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  73.     include enable-php-00.conf;
  74.     #PHP-INFO-END

  76.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  77.     include /www/server/panel/vhost/rewrite/assets.205b.com.conf;
  78.     #REWRITE-END

  80.     #禁止访问的文件或目录
  81.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  82.     {
  83.         return 404;
  84.     }

  86.     #一键申请SSL证书验证目录相关设置
  87.     location ~ \.well-known{
  88.         allow all;
  89.     }

  91.     #禁止在证书验证目录放入敏感文件
  92.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  93.         return 403;
  94.     }

  96.     #location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  97.    # {
  98.    #     expires      30d;
  99.     #    error_log /dev/null;
  100.      #   access_log /dev/null;
  101.     }

  103.   #  location ~ .*\.(js|css)?$
  104.   #  {
  105.    #     expires      12h;
  106.     #    error_log /dev/null;
  107.      #   access_log /dev/null;
  108.   #  }
  109.     access_log  /www/wwwlogs/assets.205b.com.log;
  110.     error_log  /www/wwwlogs/assets.205b.com.error.log;
  111. #}
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:27:34 | 显示全部楼层
avatars.205b.com     avatars.githubusercontent.com
  1. upstream avatarsgithub {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name avatars.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/github.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/github.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/github.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31.     error_page 497  https://$host$request_uri;

  33.     # SSL
  34.     location ~ \.well-known {
  35.         allow all;
  36.     }
  37.    
  38.     # Fuck Search Engine
  39.     location /robots.txt {
  40.         allow all;
  41.     }
  42.    
  43.     #PROXY-START/
  44.     location ~* \.(php|jsp|cgi|asp|aspx)$
  45.     {
  46.         proxy_pass https://avatars.githubusercontent.com;
  47.         proxy_set_header Host avatars.githubusercontent.com;
  48.         proxy_set_header X-Real-IP $remote_addr;
  49.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  50.         proxy_set_header REMOTE-HOST $remote_addr;
  51.     }
  52.    
  53.     location /
  54.     {
  55.         proxy_pass https://avatars.githubusercontent.com;
  56.         proxy_set_header Host avatars.githubusercontent.com;
  57.         proxy_set_header X-Real-IP $remote_addr;
  58.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  59.         proxy_set_header REMOTE-HOST $remote_addr;
  60.         add_header X-Cache $upstream_cache_status;
  61.         proxy_ignore_headers Set-Cookie Cache-Control expires;
  62.         # proxy_cache cache_one;
  63.         proxy_cache_key $host$uri$is_args$args;
  64.         proxy_cache_valid 200 304 301 302 480m;
  65.         expires 12h;
  66.     }
  67.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  68.     #error_page 404 /404.html;
  69.     #error_page 502 /502.html;
  70.     #ERROR-PAGE-END

  72.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  73.    

  75.         include enable-php-00.conf;
  76.     #PHP-INFO-END

  78.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  79.     include /www/server/panel/vhost/rewrite/github.205b.com.conf;
  80.     #REWRITE-END

  82.     #禁止访问的文件或目录
  83.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  84.     {
  85.         return 404;
  86.     }

  88.     #一键申请SSL证书验证目录相关设置
  89.     location ~ \.well-known{
  90.         allow all;
  91.     }

  93.     #禁止在证书验证目录放入敏感文件
  94.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  95.         return 403;
  96.     }

  98.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  99.     {
  100.         expires      30d;
  101.         error_log /dev/null;
  102.         access_log /dev/null;
  103.     }
  104.     location ~ .*\.(js|css)?$
  105.     {
  106.         expires      12h;
  107.         error_log /dev/null;
  108.         access_log /dev/null;
  109.     }
  110.         access_log  /www/wwwlogs/github.205b.com.log;
  111.     error_log  /www/wwwlogs/github.205b.com.error.log;
  112. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:27:59 | 显示全部楼层
api.github.com
  1. upstream apigithub {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name api.205b.com;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/api.205b.com;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/api.205b.com/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/api.205b.com/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END
  31.     error_page 497  https://$host$request_uri;

  33.     # SSL
  34.     location ~ \.well-known {
  35.         allow all;
  36.     }
  37.    
  38.     # Fuck Search Engine
  39.     location /robots.txt {
  40.         allow all;
  41.     }
  42.    
  43.     #PROXY-START/
  44.     location ~* \.(php|jsp|cgi|asp|aspx)$
  45.     {
  46.         proxy_pass https://api.github.com;
  47.         proxy_set_header Host api.github.com;
  48.         proxy_set_header X-Real-IP $remote_addr;
  49.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  50.         proxy_set_header REMOTE-HOST $remote_addr;
  51.     }
  52.    
  53.     location /
  54.     {
  55.         proxy_pass https://api.github.com;
  56.         proxy_set_header Host api.github.com;
  57.         proxy_set_header X-Real-IP $remote_addr;
  58.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  59.         proxy_set_header REMOTE-HOST $remote_addr;
  60.         add_header X-Cache $upstream_cache_status;
  61.         proxy_ignore_headers Set-Cookie Cache-Control expires;
  62.         # proxy_cache cache_one;
  63.         proxy_cache_key $host$uri$is_args$args;
  64.         proxy_cache_valid 200 304 301 302 480m;
  65.         expires 12h;
  66.     }
  67.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  68.     #error_page 404 /404.html;
  69.     #error_page 502 /502.html;
  70.     #ERROR-PAGE-END

  72.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  73.    

  75.         include enable-php-00.conf;
  76.     #PHP-INFO-END

  78.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  79.     include /www/server/panel/vhost/rewrite/api.205b.com.conf;
  80.     #REWRITE-END

  82.     #禁止访问的文件或目录
  83.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  84.     {
  85.         return 404;
  86.     }

  88.     #一键申请SSL证书验证目录相关设置
  89.     location ~ \.well-known{
  90.         allow all;
  91.     }

  93.     #禁止在证书验证目录放入敏感文件
  94.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  95.         return 403;
  96.     }

  98.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  99.     {
  100.         expires      30d;
  101.         error_log /dev/null;
  102.         access_log /dev/null;
  103.     }
  104.     location ~ .*\.(js|css)?$
  105.     {
  106.         expires      12h;
  107.         error_log /dev/null;
  108.         access_log /dev/null;
  109.     }
  110.         access_log  /www/wwwlogs/api.205b.com.log;
  111.     error_log  /www/wwwlogs/api.205b.com.error.log;
  112. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:28:49 | 显示全部楼层
codeload.205bcom collector.github.com
  1. upstream collectorgithub {
  2.     server github.com:443;
  3.     keepalive 32;
  4. }
  5. server
  6. {
  7.     listen 80;
  8.                 listen 443 ssl http2;
  9.     server_name codeload.205bcom;
  10.     index index.php index.html index.htm default.php default.htm default.html;
  11.     root /www/wwwroot/codeload.205bcom;

  13.     #SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
  14.     #error_page 404/404.html;
  15.     #HTTP_TO_HTTPS_START
  16.     if ($server_port !~ 443){
  17.         rewrite ^(/.*)$ https://$host$1 permanent;
  18.     }
  19.     #HTTP_TO_HTTPS_END
  20.     ssl_certificate    /www/server/panel/vhost/cert/codeload.205bcom/fullchain.pem;
  21.     ssl_certificate_key    /www/server/panel/vhost/cert/codeload.205bcom/privkey.pem;
  22.     ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  23.     ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  24.     ssl_prefer_server_ciphers on;
  25.     ssl_session_cache shared:SSL:10m;
  26.     ssl_session_timeout 10m;
  27.     add_header Strict-Transport-Security "max-age=31536000";
  28.     error_page 497  https://$host$request_uri;

  30.     #SSL-END

  32.     error_page 497  https://$host$request_uri;

  34.     # SSL
  35.     location ~ \.well-known {
  36.         allow all;
  37.     }
  38.    
  39.     # Fuck Search Engine
  40.     location /robots.txt {
  41.         allow all;
  42.     }
  43.    
  44.     #PROXY-START/
  45.     location ~* \.(php|jsp|cgi|asp|aspx)$
  46.     {
  47.         proxy_pass https://collector.github.com;
  48.         proxy_set_header Host collector.github.com;
  49.         proxy_set_header X-Real-IP $remote_addr;
  50.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  51.         proxy_set_header REMOTE-HOST $remote_addr;
  52.     }
  53.    
  54.     location /
  55.     {
  56.         proxy_pass https://collector.github.com;
  57.         proxy_set_header Host collector.github.com;
  58.         proxy_set_header X-Real-IP $remote_addr;
  59.         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  60.         proxy_set_header REMOTE-HOST $remote_addr;
  61.         add_header X-Cache $upstream_cache_status;
  62.         proxy_ignore_headers Set-Cookie Cache-Control expires;
  63.         # proxy_cache cache_one;
  64.         proxy_cache_key $host$uri$is_args$args;
  65.         proxy_cache_valid 200 304 301 302 480m;
  66.         expires 12h;
  67.     }
  68.     #ERROR-PAGE-START  错误页配置，可以注释、删除或修改
  69.     #error_page 404 /404.html;
  70.     #error_page 502 /502.html;
  71.     #ERROR-PAGE-END

  73.     #PHP-INFO-START  PHP引用配置，可以注释或修改
  74.     include enable-php-00.conf;
  75.     #PHP-INFO-END

  77.     #REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
  78.     include /www/server/panel/vhost/rewrite/codeload.205bcom.conf;
  79.     #REWRITE-END

  81.     #禁止访问的文件或目录
  82.     location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
  83.     {
  84.         return 404;
  85.     }

  87.     #一键申请SSL证书验证目录相关设置
  88.     location ~ \.well-known{
  89.         allow all;
  90.     }

  92.     #禁止在证书验证目录放入敏感文件
  93.     if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
  94.         return 403;
  95.     }

  97.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
  98.     {
  99.         expires      30d;
  100.         error_log /dev/null;
  101.         access_log /dev/null;
  102.     }

  104.     location ~ .*\.(js|css)?$
  105.     {
  106.         expires      12h;
  107.         error_log /dev/null;
  108.         access_log /dev/null;
  109.     }
  110.     access_log  /www/wwwlogs/codeload.205bcom.log;
  111.     error_log  /www/wwwlogs/codeload.205bcom.error.log;
  112. }
复制代码
回复

举报

yycvip

83

主题

31

回帖

780

积分

管理员

积分
780
 楼主| 发表于 2023-10-9 22:30:42 | 显示全部楼层
        user-images.205b.com
user-images.githubusercontent.com  
直接宝塔反向代理
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

快速回复 返回顶部 返回列表