详解如何设置Nginx实现内外网端口映射

sudo apt update
sudo apt install nginx

server {
    listen 80;  # 监听外网请求的 80 端口
    server_name 203.0.113.1;  # 外网服务器 IP 或域名

    location / {  # 所有请求都会匹配这个 location
        proxy_pass http://192.168.1.10:8080;  # 将请求转发到内网服务
        proxy_set_header Host $host;  # 保留原始主机头
        proxy_set_header X-Real-IP $remote_addr;  # 传递真实客户端 IP
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  # 传递代理链中的所有 IP
        proxy_set_header X-Forwarded-Proto $scheme;  # 传递请求协议
    }
}

sudo nginx -t

sudo systemctl restart nginx

sudo ufw allow 'Nginx Full'

curl http://203.0.113.1/

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d yourdomain.com  # 将 yourdomain.com 替换为您的域名

server {
    listen 80;
    server_name yourdomain.com;

    # 强制重定向到 HTTPS
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;  # 监听 HTTPS
    server_name yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/yourdomain.com/fullchain.pem;  # SSL 证书路径
    ssl_certificate_key /etc/letsencrypt/live/yourdomain.com/privkey.pem;  # SSL 密钥路径

    location / {
        proxy_pass http://192.168.1.10:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}