lushirong/nginx_proxy repository overview

docker run -d \
  --name nginx_proxy \
  --restart=always \
  --network host \
  -e TZ=Asia/Shanghai \ 
  -v ./nginx.conf:/usr/local/nginx/conf/nginx.conf \
  lushirong/nginx_proxy:1.27.5

server {
    listen 3128;

    # DNS 解析（公网，带缓存）
    resolver 114.114.114.114 8.8.8.8 valid=30s ipv6=off;
    resolver_timeout 5s;

    # 内网访问白名单
    allow 172.16.0.0/12;
    allow 127.0.0.1;
    deny all;

    # --------------------------
    # CONNECT 隧道代理（HTTPS）
    # --------------------------
    proxy_connect;
    proxy_connect_allow            443 8443;
    proxy_connect_connect_timeout  10s;
    proxy_connect_data_timeout     15s;

    # 可选：固定出口IP（多网卡服务器建议开启）
    # proxy_connect_bind 本机出口IP;

    # --------------------------
    # 普通 HTTP 正向代理（非CONNECT）
    # --------------------------
    location / {
        # 禁止透明代理风险，强制走代理模式
        proxy_pass http://$host$request_uri;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_connect_timeout 10s;
        proxy_send_timeout 15s;
        proxy_read_timeout 15s;
        proxy_buffering off;
    }
}