nginx 重定向到错误的网站

Question

我配置了两个在 nginx 后面运行的节点应用程序。 nginx 用作反向代理，一个域重定向到其默认 url 上的错误应用，

app1 端口 3000 域名 http://www.site1.com和 https://www.site1.com

app2 端口 3001 域名 http://www.site2.com

http://www.site1.com和 https://www.site1.com工作正常并为 app1 服务

但是当http://www.site2.com它重定向到 https://www.site2.com和服务器 app1

但是当http://www.site2.com/someurl请求它服务器 app2

这里是nginx配置

站点 1

server {
        listen 80 default_server;
        listen [::]:80 default_server;
        server_name www.site1.com;
        return 301 https://$server_name$request_uri;
}
server {

  listen 443 ssl;

  server_name www.site.com;
  ssl on;
  ssl_certificate /certificate.crt;
  ssl_certificate_key /psa.rsa;
  location / {
      proxy_pass http://localhost:3000;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection 'upgrade';
      proxy_set_header Host $host;
      proxy_cache_bypass $http_upgrade;
      proxy_cookie_path / "/; HTTPOnly; Secure";
  }
}

站点 1 session

server {
        listen 80;
        server_name www.site2.com;
        location / {
                proxy_pass http://localhost:3001;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection ‘upgrade’;
                proxy_set_header Host $host;
                proxy_cache_bypass $http_upgrade;
        }
}

默认配置

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

# Default server configuration
#
server {
        #listen 80 default_server;
        #listen [::]:80 default_server;

        # SSL configuration
        #
        #listen 443 ssl default_server;
        #listen [::]:443 ssl default_server;
        #
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name _;

        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
        }

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #       include snippets/fastcgi-php.conf;
        #
        #       # With php7.0-cgi alone:
        #       fastcgi_pass 127.0.0.1:9000;
        #       # With php7.0-fpm:
        #       fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #       deny all;
        #}
}


# Virtual Host configuration for example.com
#
# You can move that to a different file under sites-available/ and symlink that
# to sites-enabled/ to enable it.
#
#server {
#       listen 80;
#       listen [::]:80;
#
#       server_name example.com;
#
#       root /var/www/example.com;
#       index index.html;
#
#       location / {
#               try_files $uri $uri/ =404;
    #       }
#}

Answer 1

你只有一个 https 服务器 conf，它代理所有对 app1(端口 3000)的请求，它不会为你提供 https 上的 app2。

通过检查请求的 Host header 有条件地代理到 app2 或 app1，例如:

server {
    listen 443 ssl;
    ...
    location / {
        if ($host = 'www.site1.com') {
            proxy_pass http://localhost:3000;
        }
        if ($host = 'www.site2.com') {
            proxy_pass http://localhost:3001;
        }
    }
}