airplayx/cms repository overview

docker run -d --name=cms --restart=always -p 80:2023 airplayx/cms

map $http_upgrade $connection_upgrade {
	default upgrade;
	'' close;
}

server {
	listen 80 default_server;
	listen [::]:80 default_server;
	listen 443 ssl default_server;
	listen [::]:443 ssl default_server;
	server_name _ ;
	if ($host != $server_name) {
		return       444;
	}
	ssl_certificate          cert/default.crt;    
	ssl_certificate_key      cert/default.key;   
}

server {
	listen 80;
	server_name domain.com *.domain.com;
	return 301 https://$http_host$request_uri;
}

server {
	listen 443 ssl;
	server_name domain.com *.domain.com;
	ssl_certificate conf.d/ssl/1_domain.com_bundle.crt;
	ssl_certificate_key conf.d/ssl/2_domain.com.key;
	ssl_session_cache shared:SSL:1m;
	ssl_session_timeout  10m;
	ssl_ciphers HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers on;

	location / {
		if ($http_user_agent ~* "baiduspider|360spider|Sogou web spider|
		Sosospider|YisouSpider|Bingbot|Googlebot") {
			#return 403;
		}

		if ($http_user_agent ~* (Scrapy|Curl|HttpClient)) {
			return 403;
		}

		if ($http_user_agent ~* "WinHttp|WebZIP|FetchURL|node-superagent|java/|FeedDemon|Jullo|
		JikeSpider|Indy Library|Alexa Toolbar|AskTbFXTV|AhrefsBot|CrawlDaddy|Java|Feedly|
		Apache-HttpAsyncClient|UniversalFeedParser|ApacheBench|Microsoft URL Control|
		Swiftbot|ZmEu|oBot|jaunty|Python-urllib|lightDeckReports Bot|YYSpider|DigExt|
		HttpClient|MJ12bot|heritrix|EasouSpider|Ezooms|BOT/0.1|YandexBot|FlightDeckReports|
		Linguee Bot|^$" ) {
			return 403;
		}

		# your server port
		proxy_pass http://localhost:2023;
		client_max_body_size 200m;
		proxy_set_header Host $host;
		set_real_ip_from 0.0.0.0/0;
		real_ip_header X-Forwarded-For;
		proxy_set_header X-Real-IP $remote_addr;
		# proxy_set_header X-Appengine-Remote-Addr $remote_addr;
		# proxy_set_header CF-Connecting-IP $remote_addr;
		proxy_set_header X-Forwarded-For $remote_addr;
		proxy_set_header X-Forwarded-Proto $scheme;

		add_header X-Frame-Options DENY always;
		add_header X-Content-Type-Options nosniff always;

		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection  $connection_upgrade;
	}
}