github/jumpserver-charts
1
0
Fork 0
mirror of https://github.com/jumpserver/helm-charts.git synced 2025-08-22 08:46:34 +00:00
Code Issues Projects Releases Wiki Activity

perf: 优化nginx

Browse Source
This commit is contained in:
wojiushixiaobai 2021-08-17 15:25:55 +08:00
parent c5469d5292
commit 0012d89a82
2 changed files with 68 additions and 97 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

163
configs/jms-nginx/nginx.conf
View File

@ -2,103 +2,74 @@
{{- $lion := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-lion" ($.Values.lion.service.web.port | toString) }} {{- $lion := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-lion" ($.Values.lion.service.web.port | toString) }}
{{- $web := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-core" ($.Values.core.service.web.port | toString) }} {{- $web := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-core" ($.Values.core.service.web.port | toString) }}
{{- $ws := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-core" ($.Values.core.service.ws.port | toString) }} {{- $ws := printf "http://%s-%s:%s" (include "jumpserver.fullname" $) "jms-core" ($.Values.core.service.ws.port | toString) }}
user nginx; server {
worker_processes auto; listen {{ $.Values.nginx.service.web.port }};
error_log /var/log/nginx/error.log; server_name _;
pid /run/nginx.pid; server_tokens off;
include /usr/share/nginx/modules/*.conf; client_max_body_size 4096m; # 录像及文件上传大小限制
events { location /ui/ {
worker_connections 1024; try_files $uri / /index.html;
} alias /opt/lina/;
}
http { location /luna/ {
log_format main '$remote_addr - $remote_user [$time_local] "$request" ' try_files $uri / /index.html;
'$status $body_bytes_sent "$http_referer" ' alias /opt/luna/;
'"$http_user_agent" "$http_x_forwarded_for" "$upstream_addr"'; }
location /media/ {
access_log /var/log/nginx/access.log main; add_header Content-Encoding gzip;
# access_log off; root /opt/jumpserver/data/;
}
sendfile on; location /static/ {
tcp_nopush on; root /opt/jumpserver/data/;
tcp_nodelay on; }
keepalive_timeout 65; location /koko/ {
types_hash_max_size 2048; proxy_pass {{$koko}};
proxy_buffering off;
include /etc/nginx/mime.types; proxy_http_version 1.1;
default_type application/octet-stream; proxy_set_header Upgrade $http_upgrade;
# include /etc/nginx/conf.d/*.conf; proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
server { proxy_set_header Host $host;
listen {{ $.Values.nginx.service.web.port }}; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
server_name _; }
location /lion/ {
client_max_body_size 4096m; # 录像及文件上传大小限制 proxy_pass {{$lion}};
proxy_buffering off;
location /ui/ { proxy_http_version 1.1;
try_files $uri / /index.html; proxy_request_buffering off;
alias /opt/lina/; proxy_set_header Upgrade $http_upgrade;
} proxy_set_header Connection $http_connection;
location /luna/ { proxy_set_header X-Real-IP $remote_addr;
try_files $uri / /index.html; proxy_set_header Host $host;
alias /opt/luna/; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
} }
location /media/ { location /ws/ {
add_header Content-Encoding gzip; proxy_pass {{$ws}};
root /opt/jumpserver/data/; proxy_buffering off;
} proxy_http_version 1.1;
location /static/ { proxy_set_header Upgrade $http_upgrade;
root /opt/jumpserver/data/; proxy_set_header Connection "upgrade";
} proxy_set_header X-Real-IP $remote_addr;
location /koko/ { proxy_set_header Host $host;
proxy_pass {{$koko}}; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_buffering off; }
proxy_http_version 1.1; location /api/ {
proxy_set_header Upgrade $http_upgrade; proxy_pass {{$web}};
proxy_set_header Connection "upgrade"; proxy_buffering off;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
} }
location /lion/ { location /core/ {
proxy_pass {{$lion}}; proxy_pass {{$web}};
proxy_buffering off; proxy_buffering off;
proxy_http_version 1.1; proxy_set_header X-Real-IP $remote_addr;
proxy_request_buffering off; proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Connection $http_connection; }
proxy_set_header X-Real-IP $remote_addr; location / {
proxy_set_header Host $host; rewrite ^/(.*)$ /ui/$1 last;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /ws/ {
proxy_pass {{$ws}};
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /api/ {
proxy_pass {{$web}};
proxy_buffering off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /core/ {
proxy_pass {{$web}};
proxy_buffering off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location / {
rewrite ^/(.*)$ /ui/$1 last;
}
} }
} }

2
templates/deployment-nginx.yaml
View File

@ -52,7 +52,7 @@ spec:
resources: resources:
{{- toYaml .resources | nindent 12 }} {{- toYaml .resources | nindent 12 }}
volumeMounts: volumeMounts:
- mountPath: "/etc/nginx/nginx.conf" - mountPath: "/etc/nginx/conf.d/default.conf"
name: "jms-nginx-config" name: "jms-nginx-config"
subPath: "nginx.conf" subPath: "nginx.conf"
- mountPath: "/opt/jumpserver/data" - mountPath: "/opt/jumpserver/data"