Last active
July 21, 2016 02:36
-
-
Save borgle/c5d95ff7a88668de5cc34a2e0e31a147 to your computer and use it in GitHub Desktop.
集合多人智慧,nginx反向代理google网站的配置。 如果是restart nginx的话,记得先rm -rf /var/run/nginx-gunzip.sock;当然reload的话,就不需要。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
upstream google { | |
server 210.158.146.160:443 max_fails=3; | |
server 210.158.146.161:443 max_fails=3; | |
server 210.158.146.162:443 max_fails=3; | |
server 210.158.146.163:443 max_fails=3; | |
server 210.158.146.164:443 max_fails=3; | |
server 210.158.146.165:443 max_fails=3; | |
# add more google ip | |
} | |
server { | |
listen unix:/var/run/nginx-gunzip.sock; | |
location / { | |
proxy_set_header Accept-Encoding gzip; | |
proxy_pass google; | |
gunzip on; | |
access_log off; | |
} | |
} | |
server | |
{ | |
listen 80; | |
listen 443 ssl; | |
server_name xxx.com; | |
ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem; | |
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem; | |
ssl_session_timeout 5m; | |
ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem; | |
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem; | |
ssl_session_timeout 5m; | |
ssl_protocols TLSv1.2 TLSv1.1 TLSv1; | |
ssl_ciphers HIGH:!aNULL:!MD5; | |
ssl_prefer_server_ciphers on; | |
location / { | |
proxy_redirect off; | |
proxy_pass http://unix:/var/run/nginx-gunzip.sock:$request_uri; | |
#proxy_pass https://www.google.com; | |
proxy_cookie_domain google.com xxx.com; | |
proxy_set_header Host www.google.com; | |
proxy_set_header User-Agent $http_user_agent; | |
proxy_set_header X-Real-IP $remote_addr; | |
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | |
proxy_set_header X-Forwarded-Proto https; | |
proxy_set_header Accept-Encoding ""; | |
proxy_set_header Accept-Language "zh-CN"; | |
sub_filter onmousedown= "target='_blank' d="; | |
sub_filter www.google.com www.xxx.com; | |
sub_filter_once off; | |
} | |
access_log /var/log/google/access.log; | |
error_log /var/log/google/error.log; | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment