服务器与 SSL 配置笔记

1. Nginx 配置片段

HTTPS 443 配置

server {
    listen 443 ssl;
    server_name maxkb.zhaopeng.site;

    # SSL 配置 (使用全局定义的证书路径)
    ssl_certificate $ssl_certificate;
    ssl_certificate_key $ssl_certificate_key;

    location / {
        proxy_pass http://maxkb:8080;  # 使用 Docker Compose 服务名
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;  # 传递 HTTPS/HTTP 协议
    }
}

HTTP 80 重定向

server {
    listen 80;
    server_name maxkb.zhaopeng.site;
    return 301 https://$host$request_uri;
}

2. OpenSSL 命令记录

生成自签名证书（IP 地址）

openssl x509 -req -in 192.168.10.10 -CA ca.crt.pem -CAkey ca.key.pem -CAcreateserial -out hass.crt -days 3650 -extfile <(printf "IP:192.168.10.10") -extensions v3_ca -config /etc/pki/tls/openssl.cnf

SSL 连接测试

openssl s_client -connect 117.72.209.150:8125
openssl s_client -showcerts -connect 117.72.209.150:8129
openssl s_client -showcerts -connect ha2.zhaopeng.site:443
openssl s_client -connect ha2.zhaopeng.site:443 -tls1_2

3. 服务与代理配置

未响应的 IP

• 117.72.209.150 未发送任何数据。

HTTP 配置项

http:
  use_x_forwarded_for: True
  trusted_proxies:
    - 127.0.0.1
    - 172.20.0.0/24

4. TLS 加密套件

加密套件列表

TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:CHACHA20-POLY1305-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384

另一种套件配置

'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384'

5. Docker 操作

重新加载 Nginx

docker exec -it ng nginx -s reload

6. 浏览器访问测试

Firefox 隐私窗口

"C:\Program Files\Mozilla Firefox\private_browsing.exe" http://ha2.zhaopeng.site
"C:\Program Files\Mozilla Firefox\private_browsing.exe" https://ql.zhaopeng.site
"C:\Program Files\Mozilla Firefox\private_browsing.exe" 117.72.209.150:8129
"C:\Program Files\Mozilla Firefox\private_browsing.exe" 35.212.182.88:54321
"C:\Program Files\Mozilla Firefox\private_browsing.exe" 35.212.182.88:7865
"C:\Program Files\Mozilla Firefox\private_browsing.exe" https://opli.zhaopeng.site

Chrome 无痕窗口

"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito https://ha2.zhaopeng.site
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito https://ql.zhaopeng.site
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 117.72.209.150:8129
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 3.86.151.141:5764 3.86.151.141:51469
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 35.212.182.88:54321
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 117.72.209.150:54321
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 35.212.182.88:7865
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito 35.212.182.88:7870
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito xui.755855.xyz
"C:\Program Files\Google\Chrome\Application\chrome.exe" --incognito https://opli.zhaopeng.site

如果需要进一步整理为表格、分类说明或提取特定配置项，我可以继续优化。