JumpServer 环境整合

1 操作过程

1.1 编辑配置文件

  1. vi /etc/nginx/conf.d/jumpserver.conf

1.2 选择部署方式

源代码部署使用 Release

  1. server {
  2.   listen 80;
  3.   # server_name _;
  5.   client_max_body_size 5000m; # 文件大小限制
  7.   # Luna 配置
  8.   location /luna/ {
  9.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  10.     # proxy_pass       http://127.0.0.1:4200;
  11.     proxy_pass http://luna:4200;
  12.   }
  14.   # Core data 静态资源
  15.   location /media/replay/ {
  16.     add_header Content-Encoding gzip;
  17.     root /opt/jumpserver-v3.10.1/data/;
  18.   }
  20.   location /static/ {
  21.     root /opt/jumpserver-v3.10.1/data/;
  22.   }
  24.   # KoKo Lion 配置
  25.   location /koko/ {
  26.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  27.     # proxy_pass       http://127.0.0.1:5000;
  28.     proxy_pass       http://koko:5000;
  29.     proxy_set_header X-Real-IP $remote_addr;
  30.     proxy_set_header Host $host;
  31.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  32.     proxy_http_version 1.1;
  33.     proxy_buffering off;
  34.     proxy_set_header Upgrade $http_upgrade;
  35.     proxy_set_header Connection "upgrade";
  36.   }
  38.   # lion 配置
  39.   location /lion/ {
  40.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  41.     # proxy_pass       http://127.0.0.1:8081;
  42.     proxy_pass http://lion:8081;
  43.     proxy_buffering off;
  44.     proxy_request_buffering off;
  45.     proxy_http_version 1.1;
  46.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  47.     proxy_set_header Upgrade $http_upgrade;
  48.     proxy_set_header Connection $http_connection;
  49.     proxy_ignore_client_abort on;
  50.     proxy_connect_timeout 600;
  51.     proxy_send_timeout 600;
  52.     proxy_read_timeout 600;
  53.     send_timeout 6000;
  54.   }
  56.   location /ws/ {
  57.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  58.     # proxy_pass       http://127.0.0.1:8080;
  59.     proxy_pass http://core:8080;
  60.     proxy_buffering off;
  61.     proxy_http_version 1.1;
  62.     proxy_set_header Upgrade $http_upgrade;
  63.     proxy_set_header Connection "upgrade";
  64.     proxy_set_header X-Real-IP $remote_addr;
  65.     proxy_set_header Host $host;
  66.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  67.   }
  69.   location ~ ^/(core|api|media)/ {
  70.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  71.     # proxy_pass       http://127.0.0.1:8080;
  72.     proxy_pass http://core:8080;
  73.     proxy_set_header X-Real-IP $remote_addr;
  74.     proxy_set_header Host $host;
  75.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  76.   }
  78.   # 前端 Lina
  79.   location /ui/ {
  80.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  81.     # proxy_pass       http://127.0.0.1:9528;
  82.     proxy_pass http://lina:9528;
  83.     proxy_set_header X-Real-IP $remote_addr;
  84.     proxy_set_header Host $host;
  85.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  86.   }
  88.   location / {
  89.     rewrite ^/(.*)$ /ui/$1 last;
  90.   }
  91. }
  1. server {
  2.   listen 80;
  3.   # server_name _;
  5.   client_max_body_size 5000m; # 文件大小限制
  7.   # 前端 Lina
  8.   location /ui/ {
  9.     try_files $uri / /index.html;
  10.     alias /opt/lina-v3.10.1/;
  11.     expires 24h;
  12.   }
  14.   # Luna 配置
  15.   location /luna/ {
  16.     try_files $uri / /index.html;
  17.     alias /opt/luna-v3.10.1/;
  18.     expires 24h;
  19.   }
  21.   # Core data 静态资源
  22.   location /media/replay/ {
  23.     add_header Content-Encoding gzip;
  24.     root /opt/jumpserver-v3.10.1/data/;
  25.   }
  27.   location /static/ {
  28.     root /opt/jumpserver-v3.10.1/data/;
  29.     expires 24h;
  30.   }
  32.   # KoKo Lion 配置
  33.   location /koko/ {
  34.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  35.     # proxy_pass       http://127.0.0.1:5000;
  36.     proxy_pass       http://koko:5000;
  37.     proxy_set_header X-Real-IP $remote_addr;
  38.     proxy_set_header Host $host;
  39.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  40.     proxy_http_version 1.1;
  41.     proxy_buffering off;
  42.     proxy_set_header Upgrade $http_upgrade;
  43.     proxy_set_header Connection "upgrade";
  44.   }
  46.   # lion 配置
  47.   location /lion/ {
  48.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  49.     # proxy_pass       http://127.0.0.1:8081;
  50.     proxy_pass http://lion:8081;
  51.     proxy_buffering off;
  52.     proxy_request_buffering off;
  53.     proxy_http_version 1.1;
  54.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  55.     proxy_set_header Upgrade $http_upgrade;
  56.     proxy_set_header Connection $http_connection;
  57.     proxy_ignore_client_abort on;
  58.     proxy_connect_timeout 600;
  59.     proxy_send_timeout 600;
  60.     proxy_read_timeout 600;
  61.     send_timeout 6000;
  62.   }
  64.   location /ws/ {
  65.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  66.     # proxy_pass       http://127.0.0.1:8080;
  67.     proxy_pass http://core:8080;
  68.     proxy_buffering off;
  69.     proxy_http_version 1.1;
  70.     proxy_set_header Upgrade $http_upgrade;
  71.     proxy_set_header Connection "upgrade";
  72.     proxy_set_header X-Real-IP $remote_addr;
  73.     proxy_set_header Host $host;
  74.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  75.   }
  77.   location ~ ^/(core|api|media)/ {
  78.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  79.     # proxy_pass       http://127.0.0.1:8080;
  80.     proxy_pass http://core:8080;
  81.     proxy_set_header X-Real-IP $remote_addr;
  82.     proxy_set_header Host $host;
  83.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  84.   }
  86.   location / {
  87.     rewrite ^/(.*)$ /ui/$1 last;
  88.   }
  89. }
  1. nginx -t
  1. nginx -s reload