域名www.a.com反向代理应用lsky，开启防盗链以后，我添加网站白名单，我把图片内嵌在我的博客里，按理说只有我的网站能访问，现在的问题是直链也可以访问，感觉没起到作用。同理其他域名通过反向代理应用后，开启防盗链都没有作用，都可以不通过网站访问，直接用直链访问并下载。
大佬们，有知道怎么回事的吗？求解啊
直接在浏览器里访问图片 URL 并不能证明防盗链是否真的生效
可能是我没阐述明白？其他网站正常配置防盗链是生效的。img是反向代理docker lsky应用后，防盗链是不生效的
以下是配置
server {
listen 443 ssl http2 ;
listen 80 ;
server_name img.imuu.cn;
index index.php index.html index.htm default.php default.htm default.html;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
access_log /www/sites/img.imuu.cn/log/access.log main;
error_log /www/sites/img.imuu.cn/log/error.log;
location ^~ /.well-known/acme-challenge {
allow all;
root /usr/share/nginx/html;
}
ssl_certificate /www/sites/img.imuu.cn/ssl/fullchain.pem;
ssl_certificate_key /www/sites/img.imuu.cn/ssl/privkey.pem;
ssl_protocols TLSv1.1 TLSv1 TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
error_page 497 https://$host$request_uri;
proxy_set_header X-Forwarded-Proto https;
add_header Strict-Transport-Security “max-age=31536000”;
if ($scheme = http) {
return 301 https://$host$request_uri;
}
location ~ ..(js|css|png|jpg|jpeg|gif|ico|bmp|swf|eot|svg|ttf|woff|woff2|webp)$ {
expires 30d;
log_not_found off;
valid_referers imuu.cn www.imuu.cn hhcd.imuu.cn;
if ($invalid_referer) {
return 404;
}
}
include /www/sites/img.imuu.cn/proxy/.conf;
}