
ΠΠ»Ρ Π΄ΠΎΡΡΡΠΏΠ° ΠΊ ΠΏΡΠΎΠ΄Π°ΠΆΠ°ΠΌ https://api.itisgood.ru/sales ΠΠ»Ρ Π΄ΠΎΡΡΡΠΏΠ° ΠΊ Π±ΡΡ Π³Π°Π»ΡΠ΅ΡΠΈΠΈ https://api.itisgood.ru/accounts
--- Π£ΡΡΠ°Π½ΠΎΠ²ΠΊΠ° Nginx Π½Π° Ubuntu / Debian ------
$ sudo apt -y install nginx
$ sudo systemctl enable --now nginx
--- Π£ΡΡΠ°Π½ΠΎΠ²ΠΊΠ° Nginx Π½Π° CentOS / Fedora ------
$ sudo yum -y install nginx
$ sudo systemctl enable --now nginx
--- Π£ΡΡΠ°Π½ΠΎΠ²ΠΊΠ° Π½Π° Arch Linux / Manjaro ------
$ sudo pacman -S nginx
$ sudo systemctl enable --now nginx
Π¨Π°Π³ 1: ΠΠ·ΠΌΠ΅Π½ΠΈΡΠ΅ ΠΎΡΠ½ΠΎΠ²Π½ΠΎΠΉ ΡΠ°ΠΉΠ» ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ Nginx
ΠΡΠΊΡΠΎΠΉΡΠ΅ ΡΠ°ΠΉΠ» ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ Nginx ΠΈ Π΄ΠΎΠ±Π°Π²ΡΡΠ΅ ΡΠ»Π΅Π΄ΡΡΡΡΡ ΡΡΡΠΎΠΊΡ Π² ΡΠ°ΡΡΡ http.
Π£Π±Π΅Π΄ΠΈΡΠ΅ΡΡ, ΡΡΠΎ ΠΎΠ½Π° Π½Π°Ρ ΠΎΠ΄ΠΈΡΡΡ Π²Π½ΡΡΡΠΈ ΡΠΈΠ³ΡΡΠ½ΡΡ ΡΠΊΠΎΠ±ΠΎΠΊ http.
http { .... ...... include /etc/nginx/sites.d/*.conf; }
Π¨Π°Π³ 2: Π‘ΠΎΠ·Π΄Π°ΠΉΡΠ΅ ΠΎΡΠ½ΠΎΠ²Π½ΠΎΠΉ ΡΠ°ΠΉΠ» ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ ΡΠ°ΠΉΡΠ°
ΠΠ°Π²Π°ΠΉΡΠ΅ ΡΠ΅ΠΏΠ΅ΡΡ Π΄ΠΎΠ±Π°Π²ΠΈΠΌ ΡΠ°ΠΉΠ» ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ FQDN Π½Π°ΡΠ΅Π³ΠΎ ΠΎΡΠ½ΠΎΠ²Π½ΠΎΠ³ΠΎ ΡΠ°ΠΉΡΠ° Π² /etc/nginx/sites.d
$ sudo vim https://api.itisgood.ru
server {
listen 80;
server_name https://api.itisgood.ru;
return 301 https://api.itisgood.ru$request_uri;
}
server {
listen 443 ssl http2;
server_name https://api.itisgood.ru;
modsecurity_transaction_id "api.itisgood.ru-$request_id";
access_log /var/log/nginx/test-api-access.log;
error_log /var/log/nginx/test-api-error.log;
include /etc/nginx/default.d/api.itisgood.ru/*.conf;
}
ΠΠΎΠ½ΠΊΡΠ΅ΡΠ½ΡΠ΅ ΡΠ°ΠΉΡΡ Π±ΡΠ΄ΡΡ ΡΠ°ΡΠΏΠΎΠ»ΠΎΠΆΠ΅Π½Ρ Π² /etc/nginx/default.d/itisgood.ru/ ΠΈ, ΠΊΠ°ΠΊ Π²Ρ ΠΌΠΎΠΆΠ΅ΡΠ΅ Π·Π°ΠΌΠ΅ΡΠΈΡΡ, ΡΡΠΎ Π±ΡΠ»ΠΎ Π²ΠΊΠ»ΡΡΠ΅Π½ΠΎ Π² Π½Π°Ρ ΡΠ°ΠΉΠ» ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ.
Π¨Π°Π³ 3. Π‘ΠΎΠ·Π΄Π°Π½ΠΈΠ΅ ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΉ ΠΌΠ°ΡΡΡΡΡΠΈΠ·Π°ΡΠΈΠΈ ΡΠ°ΠΉΡΠ°
Π’Π΅ΠΏΠ΅ΡΡ ΡΠΎΠ·Π΄Π°ΠΉΡΠ΅ ΡΠ°ΠΉΡΡ Π² ΠΊΠ°ΡΠ°Π»ΠΎΠ³Π΅ /etc/nginx/default.d/api.api.itisgood.ru
/, ΠΊΠ°ΠΊ ΡΠΊΠ°Π·Π°Π½ΠΎ Π² ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ Π²ΡΡΠ΅.
Π ΡΡΠΎΠΉ Π½Π°ΡΡΡΠΎΠΉΠΊΠ΅ ΠΌΡ ΡΠΎΠ·Π΄Π°Π΄ΠΈΠΌ ΠΎΠ΄ΠΈΠ½ Π΄Π»Ρ sales:
cd /etc/nginx/default.d/api.itisgood.ru
$ sudo vim sales.conf location /sales/ { proxy_http_version 1.1; proxy_pass https://192.168.55.60:8443/sales/; proxy_cache_bypass $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Upgrade $http_upgrade; }
$ sudo vim accounts.conf location /accounts/ { proxy_http_version 1.1; proxy_pass https://192.168.55.63:8080/accounts/; proxy_cache_bypass $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Upgrade $http_upgrade; }