公共链接无法访问

DataEase
1

image
image1920×1080 318 KB

从1panel面板安装的dataease，并配置了https反代，所有功能都能正常访问，公共链接打不开，http也试过了，浏览器报错502

2

参考下这篇看看：【案列研究】Iframe 嵌入公共链接，协议跳转解决方案 - FIT2CLOUD 知识库

3

在nginx中添加代码也不好使，浏览器仍然报错502

4

nginx 配置文件看看

5 
server {
    listen 81 ; 
    listen 444 ssl http2 ; 
    listen 80 ; 
    listen 443 ssl http2 ; 
    server_name test.atm**.icu; 
    index index.php index.html index.htm default.php default.htm default.html; 
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-Forwarded-Host $server_name; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    access_log /www/sites/test.atm**.icu/log/access.log; 
    error_log /www/sites/test.atm**.icu/log/error.log; 
    access_by_lua_file /www/common/waf/access.lua; 
    set $RulePath /www/sites/test.atm**.icu/waf/rules; 
    set $logdir /www/sites/test.atm**.icu/log; 
    set $redirect on; 
    set $attackLog on; 
    set $CCDeny off; 
    set $urlWhiteAllow off; 
    set $urlBlockDeny off; 
    set $argsDeny off; 
    set $postDeny off; 
    set $cookieDeny off; 
    set $fileExtDeny off; 
    set $ipBlockDeny off; 
    set $ipWhiteAllow off; 
    location ~ /.well-known/acme-challenge {
        allow all; 
        root /usr/share/nginx/html; 
    }
    include /www/sites/test.atm**.icu/proxy/*.conf; 
    if ($scheme = http) {
        return 301 https://$host$request_uri; 
    }
    ssl_certificate /www/sites/test.atm**.icu/ssl/fullchain.pem; 
    ssl_certificate_key /www/sites/test.atm**.icu/ssl/privkey.pem; 
    ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1 TLSv1; 
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; 
    ssl_prefer_server_ciphers on; 
    ssl_session_cache shared:SSL:10m; 
    ssl_session_timeout 10m; 
    add_header Strict-Transport-Security "max-age=31536000"; 
    error_page 497 https://$host$request_uri; 
    proxy_set_header X-Forwarded-Proto https; 
}

用的1panel自带的OpenResty开启反向代理

6

使用 1panel 自带的 OpeResty，你浏览器 f12 看看，公共链接重定向的网站，截图看看，参考给你发的那个知识库。

7

ES(FEM~9OZ0WF42WCL269XG
ES(FEM~9OZ0WF42WCL269XG956×1063 58.4 KB

是这样吗，我看着好像都没有第二个地址来着

8

对了，我并没有采用常规的443和80端口，反向代理是走444端口，docker映射8070端口