136 lines
3.9 KiB
Nginx Configuration File
136 lines
3.9 KiB
Nginx Configuration File
# 记得添加，否则会报错：unknown directive "stream" in /etc/nginx/nginx.conf
|
|
# load_module /usr/lib/nginx/modules/ngx_stream_module.so;
|
|
# apt -y install libnginx-mod-stream
|
|
#
|
|
user www-data;
|
|
# user root;
|
|
worker_processes auto;
|
|
pid /run/nginx.pid;
|
|
# https://blog.csdn.net/liupeifeng3514/article/details/79007079
|
|
# 报错500: nginx too many open files
|
|
worker_rlimit_nofile 65535;
|
|
|
|
# Enable stream module for UDP support
|
|
load_module modules/ngx_stream_module.so;
|
|
|
|
events {
|
|
use epoll;
|
|
worker_connections 65535;
|
|
accept_mutex off;
|
|
multi_accept on;
|
|
}
|
|
|
|
http {
|
|
|
|
##
|
|
# Basic Settings
|
|
##
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
keepalive_timeout 65;
|
|
types_hash_max_size 2048;
|
|
# server_tokens off;
|
|
|
|
# server_names_hash_bucket_size 64;
|
|
# server_name_in_redirect off;
|
|
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
# 禁止ip黑名单访问服务器
|
|
# include blackip.conf;
|
|
|
|
##
|
|
# SSL Settings
|
|
##
|
|
|
|
# Only allow secure TLS versions
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers on;
|
|
ssl_ciphers HIGH:!aNULL:!MD5;
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_timeout 10m;
|
|
|
|
##
|
|
# Logging Settings
|
|
##
|
|
|
|
access_log /var/log/nginx/access.log;
|
|
error_log /var/log/nginx/error.log;
|
|
|
|
##
|
|
# Gzip Settings
|
|
##
|
|
|
|
gzip on;
|
|
gzip_disable "msie6";
|
|
|
|
##
|
|
# Virtual Host Configs
|
|
##
|
|
## http://blog.51cto.com/freeloda/1288553
|
|
## 设置缓存
|
|
## 注意：要放在/var/www/html目录下，否则会permission denied
|
|
## mkdir -p /var/www/html/nginx/cache/webserver
|
|
proxy_cache_path /var/www/html/nginx/cache/webserver levels=1:2 keys_zone=webserver:20m max_size=1g;
|
|
# use_temp_path=off;
|
|
# nginx 出现413 Request Entity Too Large问题的解决方法
|
|
client_max_body_size 1024m;
|
|
|
|
## restapi-负载均衡
|
|
upstream weiyuai {
|
|
# round_robin; # 默认，轮流分配
|
|
ip_hash; # 同一个ip访问同一台服务器, 这样来自同一个IP的访客固定访问一个后端服务器
|
|
# least_conn; # 公平分配
|
|
# server 172.16.81.2:9003 weight=2 max_fails=10 fail_timeout=60s;
|
|
server 127.0.0.1:9003 weight=2 max_fails=10 fail_timeout=60s;
|
|
}
|
|
|
|
# websocket-负载均衡
|
|
upstream weiyuaiwss {
|
|
# round_robin; # 默认，轮流分配
|
|
ip_hash; # 同一个ip访问同一台服务器, 这样来自同一个IP的访客固定访问一个后端服务器
|
|
# least_conn; # 公平分配
|
|
# server 172.16.81.2:9885 weight=2 max_fails=10 fail_timeout=60s;
|
|
server 127.0.0.1:9885 weight=2 max_fails=10 fail_timeout=60s;
|
|
}
|
|
|
|
# FreeSWITCH upstreams (HTTP/WS context)
|
|
# Note: SIP itself is NOT HTTP and must not be proxied via http { }.
|
|
# Only WS/WSS (SIP over WebSocket) should be defined here.
|
|
|
|
# FreeSWITCH external SIP upstream
|
|
upstream freeswitch_external {
|
|
server 118.25.178.96:5080; # External SIP port - public IP
|
|
}
|
|
|
|
# FreeSWITCH WebSocket upstream (WS)
|
|
upstream freeswitch_ws {
|
|
server 118.25.178.96:5066; # WebSocket port - public IP
|
|
}
|
|
|
|
# FreeSWITCH Secure WebSocket upstream (WSS)
|
|
upstream freeswitch_wss {
|
|
server 118.25.178.96:7443; # Secure WebSocket port - public IP
|
|
}
|
|
|
|
# FreeSWITCH Verto upstream (if needed)
|
|
# upstream freeswitch_verto {
|
|
# server 118.25.178.96:8081; # Verto port - public IP
|
|
# }
|
|
|
|
include /etc/nginx/conf.d/*.conf;
|
|
include /etc/nginx/sites-enabled/*;
|
|
|
|
}
|
|
|
|
# Stream module configuration for UDP
|
|
stream {
|
|
# Stream-level logging to aid troubleshooting
|
|
error_log /var/log/nginx/stream_error.log info;
|
|
|
|
# IMPORTANT: Do NOT attempt to proxy RTP via nginx stream.
|
|
# RTP uses a wide port range and should be exposed directly to FreeSWITCH
|
|
# or handled via a TURN server (e.g., coturn). Remove any single-port RTP proxy.
|
|
}
|