主页 / user-680711

Alex P's questions

Martin Hope
Alex P
Asked: 2025-02-03 02:05:47 +0000 UTC
  • 4

有这样一个设置文件nginx：

# Default server configuration
server {
        listen 80 default_server;
        listen [::]:80 default_server;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        # server_name _;
        server_name amodule.su www.amodule.su;

        # my adding ++
        location / {
                proxy_pass http://fa052d9c8361.vps.myjino.ru:8001;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Real-IP $remote_addr;
                # add_header P3P 'CP="ALL DSP COR PSAa PSDa OUR NOR ONL UNI COM NAV"';
                # add_header Access-Control-Allow-Origin *;
        }
        # my adding --

}

# Virtual Host configuration for example.com
server {
        listen [::]:443 ssl ipv6only=on;
        listen 443 ssl;

        ssl_certificate /etc/letsencrypt/live/amodule.su/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/amodule.su/privkey.pem;

        include /etc/letsencrypt/options-ssl-nginx.conf;
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name amodule.su www.amodule.su; # managed by Certbot

        # my adding ++
        location / {
                # try_files $uri/ /index.html;
                proxy_pass  http://fa052d9c8361.vps.myjino.ru:8001;
                # proxy_pass http://127.0.0.1:8001;
                proxy_set_header Host $host; # ++
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # ++
                proxy_set_header X-Forwarded-Proto $scheme;   # ++
                # add_header P3P 'CP="ALL DSP COR PSAa PSDa OUR NOR ONL UNI COM NAV"';
                # add_header Access-Control-Allow-Origin *;
        }
        # my adding --

        # ssl ubral ++
        # listen [::]:443 ssl ipv6only=on; # managed by Certbot
        # listen 443 ssl; # managed by Certbot

        # ssl_certificate /etc/letsencrypt/live/amodule.su/fullchain.pem; # managed by Certbot
        # ssl_certificate_key /etc/letsencrypt/live/amodule.su/privkey.pem; # managed by Certbot

        # include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
        # ssl ubral --

}

# ssl ubral ++
server {
    if ($host = amodule.su) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen 80 ;
    listen [::]:80 ;

    server_name amodule.su www.amodule.su;
    return 404; # managed by Certbot
}
# ssl ubral --

为了使用 SSL，我使用了 Letsencrypt。
我还更改了设置settings.py

ALLOWED_HOSTS = [
        'www.amodule.su',
        'amodule.su',
        'fa052d9c8361.vps.myjino.ru',
        '127.0.0.1',
        'localhost',
        ]

SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
SECURE_SSL_REDIRECT = True                                      # redirect all queries to HTTPS
SESSION_COOKIE_SECURE = True                                    # use secure cookies
CSRF_COOKIE_SECURE = True                                       # use secure CSRF cookies

但它不起作用..

我做错什么了？

django