1panel超简单nginx反代各种docker registry - 全球主机交流论坛

... 原代码...
location / {
resolver 1.1.1.1;
# 这个docker hub 官方registry,大部份人用这个就够了,
set $target_host registry-1.docker.io;
# 根据情况自己选择使用, 一个站点(host)只能用一个目标registry, 需要多个反代多个目标就建立多个不同站点.
# set $target_host ghcr.io; # github 使用的人也不少.
# set $target_host gcr.io; # Google
# set $target_host nvcr.io; # nvdia
# set $target_host registry.gitlab.com; # gitlab
# set $target_host quay.io; # quay
proxy_pass https://$backend_host;
proxy_set_header Host $backend_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# 关闭缓存
proxy_buffering off;
# 转发认证相关的头部
proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;
# 对 upstream 状态码检查，实现 error_page 错误重定向
proxy_intercept_errors on;
# error_page 指令默认只检查了第一次后端返回的状态码，开启后可以跟随多次重定向。
recursive_error_pages on;
# 根据状态码执行对应操作，以下为301、302、307状态码都会触发
#error_page 301 302 307 = @handle_redirect;
error_page 429 = @handle_too_many_requests;
}
#处理重定向
location @handle_redirect {
resolver 1.1.1.1;
set $saved_redirect_location '$upstream_http_location';
proxy_pass $saved_redirect_location;
}
# 处理429错误, 如registry-1.docker.io 短时间请求太多会触发, 此时可以cf work方案接力, 或者使用 warp
location @handle_too_many_requests {
#proxy_set_header Host cfcr.j8.work; # 对应 Worker设置的域名
#proxy_pass http://cfcr.j8.work; # 对应 Worker设置的域名
#proxy_set_header Host $http_host;
}

复制代码

server {
listen 80 ;
listen [::]:80 ;
listen 443 ssl http2 ;
listen [::]:443 ssl http2 ;
server_name cr.j8.work;
index index.php index.html index.htm default.php default.htm default.html;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
access_log /www/sites/cr/log/access.log;
error_log /www/sites/cr/log/error.log;
location ^~ /.well-known/acme-challenge {
allow all;
root /usr/share/nginx/html;
}
include /www/sites/cr/proxy/*.conf;
ssl_certificate /www/sites/cr/ssl/fullchain.pem;
ssl_certificate_key /www/sites/cr/ssl/privkey.pem;
ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1;
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
add_header Strict-Transport-Security "max-age=31536000";
error_page 497 https://$host$request_uri;
proxy_set_header X-Forwarded-Proto https;
ssl_stapling on;
ssl_stapling_verify on;
if ($scheme = http) {
return 301 https://$host$request_uri;
}
rewrite_log on; # 开启 rewrite 日志
# 优先级最低
location / {
proxy_pass https://registry-1.docker.io; # Docker Hub 的官方镜像仓库
proxy_set_header Host registry-1.docker.io;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# 关闭缓存
proxy_buffering off;
# 转发认证相关的头部
proxy_set_header Authorization $http_authorization;
proxy_pass_header Authorization;
# 对 upstream 状态码检查，实现 error_page 错误重定向
proxy_intercept_errors on;
# error_page 指令默认只检查了第一次后端返回的状态码，开启后可以跟随多次重定向。
recursive_error_pages on;
# 根据状态码执行对应操作，以下为301、302、307状态码都会触发
#error_page 301 302 307 = @handle_redirect;
error_page 429 = @handle_too_many_requests;
}
#处理重定向
location @handle_redirect {
resolver 1.1.1.1;
set $saved_redirect_location '$upstream_http_location';
proxy_pass $saved_redirect_location;
}
# 处理429错误
location @handle_too_many_requests {
#proxy_set_header Host cfcr.j8.work; # Worker设置的域名
#proxy_pass http://cfcr.j8.work; # Worker设置的域名
#proxy_set_header Host $http_host;
}
}

复制代码