NGINX 反向代理配置结构

Question

NGINX 反向代理的指令是否有一个“合适的”结构？在查找 NGINX 反向代理示例时，我看到了 2 个主要区别。

http指令用于容纳所有server指令。具有数据的服务器列在 upstream 指令的池中。
server 指令在 main 指令中直接列出。

这有什么原因吗，或者这只是语法上的差异？

./nginx.conf 文件中 #1 的示例：

upstream docker-registry {
  server registry:5000;
}

http {
  server {
    listen 80;
    listen [::]:80;

    return 301 https://$host#request_uri;
  }

  server {
    listen 443 default_server;
    ssl on;
    ssl_certificate external/cert.pem;
    ssl_certificate_key external/key.pem;
    
    # set HSTS-Header because we only allow https traffic
    add_header Strict-Transport-Security "max-age=31536000;";

    proxy_set_header Host       $http_host;   # required for Docker client sake
    proxy_set_header X-Real-IP  $remote_addr; # pass on real client IP

    location / {
      auth_basic "Restricted"
      auth_basic_user_file    external/docker-registry.htpasswd;
      
      proxy_pass http://docker-registry; # the docker container is the domain name
    }
    
    location /v1/_ping {
      auth_basic off;
      proxy_pass http://docker-registry; 
    }
  }
}

./nginx.conf 文件中 #2 的示例：

server {
  listen 80;
  listen [::]:80;
  
  return 301 https://$host#request_uri;
}

server {
  listen 443 ssl;
  listen [::]:443 ssl;
  
  error_log  /var/log/nginx/error.log  info;
  access_log /var/log/nginx/access.log main;

  ssl_certificate     /etc/ssl/private/{SSL_CERT_FILENAME};
  ssl_certificate_key /etc/ssl/private/{SSL_CERT_KEY_FILENAME};

  location / {
    proxy_pass http://app1
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-For $remote_addr; # could also be `$proxy_add_x_forwarded_for`
    proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header X-Request-Start $msec;
  }
}

Answer 1

我不太明白你的问题，但在我看来，第二个示例缺少 http {}，我认为没有它 nginx 将无法启动。除非您的 example2 文件以某种方式包含在具有 http{}

的 nginx.conf 中

NGINX 反向代理配置结构

NGINX Reverse Proxy Configuration Structure

ssl

nginx

docker

nginx-reverse-proxy

nginx-config

./nginx.conf 文件中 #1 的示例：

./nginx.conf 文件中 #2 的示例：