2
2

前提条件 域名要解析到服务器ip上去

ubuntu16.04 安装Nginx

非常简单，因为需要喜欢内容所以装的是full版本

sudo apt update -y sudo apt install nginx-full -y

安装好之后配置好反向代理

ssl证书

我使用的是 certbot 自动获取的 Let’s Encrypt 证书

安装 certbot

sudo apt-get update -y
sudo apt-get install software-properties-common
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update -y
sudo apt-get install python-certbot-nginx -y

使用

sudo certbot --nginx

Let’s Encrypt 证书 有效期很短 但是certbot可以一键更新

certbot renew

添加到cron自动任务就可以自动更新证书了

还有如果想测试下更新用这个指令

sudo certbot renew --dry-run

最终配置文件

proxy_cache_path /usr/local/data/nginx_cache levels=1:2 keys_zone=tmp-nuget:100m inactive=7d max_size=10g;
server {
        listen 80;
        #监听端口#
        server_name nuget.luodaoyi.com;
        #设置server name#
        charset utf-8;
        #设置字符编码为utf-8,可根据实际情况调整#
        location / {
                proxy_cache tmp-nuget;
                proxy_cache_valid  200 206 304 301 302 1d;
                proxy_cache_valid any 1d;
                proxy_cache_key $host$uri$is_args$args;
                add_header X-Via $server_addr;
                add_header X-Cache $upstream_cache_status;
                proxy_redirect off;
                proxy_pass https://www.nuget.org;
                proxy_set_header Host www.nuget.org;
                proxy_set_header User-Agent $http_user_agent;
                proxy_set_header Referer https://www.nuget.org;
                proxy_set_header Accept-Encoding "";
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                subs_filter "www.nuget.org" "nuget.luodaoyi.com";
                subs_filter "api.nuget.org" "api.nuget.luodaoyi.com";
                subs_filter_types text/css text/xml text/javascript;
        }
        listen 443 ssl http2; # managed by Certbot
        ssl_certificate /etc/letsencrypt/live/nuget.luodaoyi.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/nuget.luodaoyi.com/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
        listen 80;
        #监听端口#
        server_name api.nuget.luodaoyi.com;
        #设置server name#
        charset utf-8;
        #设置字符编码为utf-8,可根据实际情况调整#
        location / {
                proxy_cache tmp-nuget;
                proxy_cache_valid  200 206 304 301 302 1d;
                proxy_cache_valid any 1d;
                proxy_cache_key $host$uri$is_args$args;
                add_header X-Via $server_addr;
                add_header X-Cache $upstream_cache_status;
                proxy_redirect off;
                proxy_pass https://api.nuget.org/;
                proxy_set_header Host api.nuget.org;
                proxy_set_header User-Agent $http_user_agent;
                proxy_set_header Referer https://api.nuget.org;
                proxy_set_header Accept-Encoding "";
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                subs_filter "www.nuget.org" "nuget.luodaoyi.com";
                subs_filter "api.nuget.org" "api.nuget.luodaoyi.com";
                subs_filter_types text/css text/xml text/javascript;
        }
        listen 443 ssl http2; # managed by Certbot
        ssl_certificate /etc/letsencrypt/live/nuget.luodaoyi.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/nuget.luodaoyi.com/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

我的nuget

nuget:

https://nuget.luodaoyi.com

nuget api:

https://api.nuget.luodaoyi.com