代理群晖配置文件

# HTTP redirect
server {
        listen 80;
        listen [::]:80;
        server_name xxx.com *.xxx.com;
        if ($scheme = http )
        {
            return 301 https://$host$request_uri;
        }
    }


# xxx.xxx.com
server {
        listen 443 ssl http2;
        server_name xxx.xxx.com;


	#ssl on;
	ssl_certificate /ssl/cert.pem;
	ssl_certificate_key /ssl/key.pem;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1.3;
	ssl_prefer_server_ciphers on;
	ssl_ciphers "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
	ssl_session_cache builtin:1000 shared:SSL:10m;

	ssl_early_data on;
	ssl_stapling on;
	ssl_stapling_verify on;
	ssl_trusted_certificate /ssl/cert.pem;

	add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload" always;
 
        location /
        {
            proxy_pass http://192.168.50.234:5000;
            proxy_http_version 1.1;
            proxy_intercept_errors off;
            proxy_set_header        Host            $http_host;
            proxy_set_header        X-Real-IP            $remote_addr;
            proxy_set_header        X-Forwarded-For            $proxy_add_x_forwarded_for;
            proxy_set_header        X-Forwarded-Proto            $scheme;           
            proxy_read_timeout 300;
            proxy_send_timeout 300;
            proxy_connect_timeout 300;
	    client_max_body_size 10240M;
        }

}