Skip to main content
Version: v22.10

配置域名与 HTTPS 证书

配置 HTTPS 证书#

  1. 将 HTTPS 证书放置 etc/nginx/gateway 目录
  2. 修改 etc/nginx/gateway/tenant-server.conf 中增加证书相关配置
server {    listen 443 ssl http2 spdy;    server_name local.1700.cn;
    ssl_dhparam /data/configs/public_dhparam.pem;    ssl_certificate /data/configs/ssl.crt;    ssl_certificate_key /data/configs/ssl.key;    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;    ssl_prefer_server_ciphers on;
    location / {        rewrite ^/(.*)$ http://local.1700.cn/$1 permanent;    }}

配置 HTTP 访问 / 自定义端口访问#

修改 etc/nginx/gateway/tenant-server.conf 第58行监听端口（替换想要监听的端口），修改代码如下：

listen 80; => listen 8080;

限制IP访问#

修改 etc/nginx/gateway/tenant-server.conf ，新增以下配置

server {    server_name _;    listen 80 default_server;    return 403;}

执行以下命令重启

docker restart tgw