mirror of
https://github.com/mashirozx/Pixiv-Nginx.git
synced 2024-09-21 08:20:12 +08:00
Compare commits
78 Commits
Author | SHA1 | Date | |
---|---|---|---|
|
0ea7d5fe0e | ||
59f7fffc6a | |||
|
58fbb62fac | ||
|
81c7a11ef8 | ||
|
c66bcfa45a | ||
|
421553b9cb | ||
45539c9334 | |||
f34dee5ebb | |||
a2a8734147 | |||
3d5ff59de0 | |||
241d025459 | |||
0bdc796281 | |||
3a705a35e0 | |||
20cdd42069 | |||
a892ef014c | |||
95b279a94a | |||
|
65dc2cf08e | ||
|
636ec38d81 | ||
2290278d6b | |||
|
394034568b | ||
|
ead7f839c1 | ||
4af9751f6c | |||
225256fdfb | |||
|
f1a21c873a | ||
c3d514e93c | |||
|
d52796603b | ||
bfe9a4bcca | |||
a8d5d94f54 | |||
37d0fbdb6a | |||
24d181d398 | |||
|
213f863b1a | ||
|
030c49e325 | ||
|
50f768922a | ||
ef8d815d52 | |||
055cdfd8cf | |||
efd1efe0f2 | |||
d4fb3ad785 | |||
1bbdb7cb65 | |||
|
9cd793dd8f | ||
e1074329b9 | |||
1865142d9e | |||
1eed15e507 | |||
01ea484ffc | |||
|
245bbdba7b | ||
|
044891de59 | ||
|
159a5cb270 | ||
|
a145d78636 | ||
|
dd7fc38920 | ||
|
a729f59c45 | ||
|
fac6818590 | ||
|
da4a816104 | ||
d080525ba2 | |||
|
47e041cab7 | ||
|
2ef0c6ab67 | ||
051d83190b | |||
|
b0eac26b55 | ||
|
6173fe9964 | ||
|
3313580c02 | ||
|
29eebec8a2 | ||
|
cf53836a1c | ||
b655295778 | |||
|
79fe4be715 | ||
|
0f95ebc2fa | ||
88e977bb82 | |||
840ea9b4bd | |||
|
5e90308657 | ||
|
02bf17e793 | ||
ef1025ef43 | |||
14a91c53b7 | |||
262d7e49c6 | |||
7c6329bce7 | |||
a0f5d199bb | |||
bf364a6a83 | |||
c994ce74f0 | |||
08281ebec7 | |||
2644885707 | |||
903a2fe6be | |||
a07a98b77c |
50
6.安全及隐私声明.txt
Normal file
50
6.安全及隐私声明.txt
Normal file
@ -0,0 +1,50 @@
|
|||||||
|
1、SSL 证书相关提醒及声明:
|
||||||
|
需要安装的 CA 证书是自签名证书,作者本人可以保证 CA 证书的
|
||||||
|
私钥不会泄露给任何人,本人也保证不会将此 CA 证书用于此项目
|
||||||
|
以外的任何地方(如果你在其他地方看到了 Mashiro Internet
|
||||||
|
Fake Authority CA 签发的证书,你可以顺着网线过来打我)。
|
||||||
|
|
||||||
|
但是网页的证书及私钥(pixiv.net.crt、pixiv.net.key)是必
|
||||||
|
须开源放在这里的,该证书里面包括了下列的网站,除了localhost
|
||||||
|
(127.0.0.1),请不要将hosts中的下列域名指向其他任何你不信
|
||||||
|
任的IP,否则有可能遭遇中间人攻击(http://t.cn/A67reYAS)。
|
||||||
|
|
||||||
|
域名列表:
|
||||||
|
DNS.1 = *.pixiv.net
|
||||||
|
DNS.2 = pixiv.net
|
||||||
|
DNS.3 = *.secure.pixiv.net
|
||||||
|
DNS.4 = pixivision.net
|
||||||
|
DNS.5 = *.pixivision.net
|
||||||
|
DNS.6 = pixiv.me
|
||||||
|
DNS.7 = *.pixiv.me
|
||||||
|
DNS.8 = pximg.net
|
||||||
|
DNS.9 = *.pximg.net
|
||||||
|
DNS.10 = pixivsketch.net
|
||||||
|
DNS.11 = *.pixivsketch.net
|
||||||
|
DNS.12 = public-api.secure.pixiv.net
|
||||||
|
DNS.13 = wikipedia.org
|
||||||
|
DNS.14 = *.wikipedia.org
|
||||||
|
DNS.15 = m.wikipedia.org
|
||||||
|
DNS.16 = *.m.wikipedia.org
|
||||||
|
DNS.17 = google.com
|
||||||
|
DNS.18 = *.google.com
|
||||||
|
DNS.19 = steamcommunity.com
|
||||||
|
DNS.20 = *.steamcommunity.com
|
||||||
|
DNS.21 = steampowered.com
|
||||||
|
DNS.22 = *.steampowered.com
|
||||||
|
DNS.23 = archiveofourown.org
|
||||||
|
DNS.24 = *.archiveofourown.org
|
||||||
|
|
||||||
|
虽然我认为以上的网站没有中间人攻击的价值,但是,如果还是不
|
||||||
|
放心,并且自己有能力,可以选择自己签发证书,只要不泄露自己
|
||||||
|
的私钥,你的数据100%安全。
|
||||||
|
|
||||||
|
自签证书的教程见:
|
||||||
|
https://2heng.xin/2018/12/16/your-own-ca-with-openssl/
|
||||||
|
自签证书后,需要替换项目中对应的公私钥文件:
|
||||||
|
https://github.com/mashirozx/Pixiv-Nginx/tree/master/conf/ca
|
||||||
|
|
||||||
|
2、日志上传注意事项:
|
||||||
|
logs 文件夹内为服务器日志文件。access.log 为工作日志,里
|
||||||
|
面可能留下你的访问记录;error.log 为 Nginx 错误日志。通
|
||||||
|
常提供错误日志即可;分享工作日志的时候注意保护隐私。
|
@ -1,3 +0,0 @@
|
|||||||
logs 文件夹内为服务器日志文件。access.log 为工作日志,里面可能留下你的访问记录;error.log 为 Nginx 错误日志。
|
|
||||||
|
|
||||||
通常提供错误日志即可;分享工作日志的时候注意保护隐私。
|
|
@ -1,7 +1,7 @@
|
|||||||
<center>
|
<center>
|
||||||
<h1>使用说明及后续维护情况请访问<br><a href="https://2heng.xin/2017/09/19/pixiv/">https://2heng.xin/2017/09/19/pixiv/</a></h1>
|
<h1>使用说明及后续维护情况请访问<br><a href="https://2heng.xin/2017/09/19/pixiv/">https://2heng.xin/2017/09/19/pixiv/</a></h1>
|
||||||
<br><br><br>
|
<br><br><br>
|
||||||
<big>by Mashiro</big>
|
<big>by Mashiro</big>
|
||||||
<hr>
|
<hr>
|
||||||
<p><i>打包时间:2018/9/17</i></p>
|
<p><i>打包时间:2019/6/27</i></p>
|
||||||
</center>
|
</center>
|
27
LICENSE
27
LICENSE
@ -1,21 +1,14 @@
|
|||||||
MIT License
|
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||||
|
Version 2, December 2004
|
||||||
|
|
||||||
Copyright (c) 2018 Mashiro
|
Copyright (C) 2018 Mashiro
|
||||||
|
Copyright (C) 2023 Mashiro <moezhx@outlook.com>
|
||||||
|
|
||||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
Everyone is permitted to copy and distribute verbatim or modified
|
||||||
of this software and associated documentation files (the "Software"), to deal
|
copies of this license document, and changing it is allowed as long
|
||||||
in the Software without restriction, including without limitation the rights
|
as the name is changed.
|
||||||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
||||||
copies of the Software, and to permit persons to whom the Software is
|
|
||||||
furnished to do so, subject to the following conditions:
|
|
||||||
|
|
||||||
The above copyright notice and this permission notice shall be included in all
|
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||||
copies or substantial portions of the Software.
|
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||||
|
|
||||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
0. You just DO WHAT THE FUCK YOU WANT TO.
|
||||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
||||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
||||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
||||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
||||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
SOFTWARE.
|
|
||||||
|
25
README.md
25
README.md
@ -3,25 +3,22 @@
|
|||||||
[![GitHub release](https://img.shields.io/github/release/mashirozx/Pixiv-Nginx.svg?style=flat-square)](https://github.com/mashirozx/Pixiv-Nginx/releases/latest)
|
[![GitHub release](https://img.shields.io/github/release/mashirozx/Pixiv-Nginx.svg?style=flat-square)](https://github.com/mashirozx/Pixiv-Nginx/releases/latest)
|
||||||
[![Github commits (since latest release)](https://img.shields.io/github/commits-since/mashirozx/Pixiv-Nginx/latest.svg?style=flat-square)](https://github.com/mashirozx/Pixiv-Nginx/commits/)
|
[![Github commits (since latest release)](https://img.shields.io/github/commits-since/mashirozx/Pixiv-Nginx/latest.svg?style=flat-square)](https://github.com/mashirozx/Pixiv-Nginx/commits/)
|
||||||
|
|
||||||
请在[此处](https://github.com/mashirozx/Pixiv-Nginx/releases)下载最新版`Source code
|
|
||||||
(zip)`;或者在此页点击下图所示的按键下载。
|
|
||||||
![](https://view.moezx.cc/images/2018/09/17/git.png)
|
|
||||||
|
|
||||||
使用说明见 <https://2heng.xin/2017/09/19/pixiv/>
|
使用说明见 <https://2heng.xin/2017/09/19/pixiv/>
|
||||||
|
|
||||||
### 要饭
|
在本页点击下图所示的按键下载以获取最新版。
|
||||||
|
|
||||||
微信支付:
|
<img src="https://view.moezx.cc/images/2018/09/17/git.png" width="360" alt="下载方法" />
|
||||||
<img src="https://view.moezx.cc/images/2018/05/28/WeChanQR.png" width="200"/>
|
|
||||||
|
|
||||||
支付宝:
|
如遇本页下载速度过慢,可尝试通过镜像下载:
|
||||||
<img src="https://view.moezx.cc/images/2018/05/28/AliPayQR.jpg" width="200"/>
|
|
||||||
|
|
||||||
PayPal:
|
|[👉 镜像1](https://git.mashiro.top/mirrors/Pixiv-Nginx) |[👉 镜像2](https://git.moezx.cc/mirrors/Pixiv-Nginx)|
|
||||||
<https://paypal.me/mashirozx>
|
|---|---|
|
||||||
|
|<img src="https://view.moezx.cc/images/2023/03/15/ed9589b16436258a529172fbaa052b60.png" width="360" alt="镜像1下载方法" /> | <img src="https://view.moezx.cc/images/2021/10/23/c5a92987653ea0c6921b1a461401cfec.png" width="360" alt="镜像2下载方法" />|
|
||||||
|
|
||||||
|
### LICENSE
|
||||||
|
|
||||||
|
<a href="http://www.wtfpl.net/"><img src="https://ngx.moezx.cc/share/svg/brands/WTFPL_badge.svg" width="80" alt="WTFPL" /></a>
|
||||||
|
|
||||||
### Lisence
|
|
||||||
This is a fork of [nginx/nginx](https://github.com/nginx/nginx), so you should always follow its [2-clause BSD-like license](http://nginx.org/LICENSE).
|
This is a fork of [nginx/nginx](https://github.com/nginx/nginx), so you should always follow its [2-clause BSD-like license](http://nginx.org/LICENSE).
|
||||||
|
|
||||||
The visualized management tool is part of [wnmp/wnmp](https://github.com/wnmp/wnmp), which is under [GPL-3.0
|
The visualized management tool is part of [wnmp/wnmp](https://github.com/wnmp/wnmp), which is under [GPL-3.0](https://github.com/wnmp/wnmp/blob/master/LICENSE).
|
||||||
](https://github.com/wnmp/wnmp/blob/master/LICENSE).
|
|
||||||
|
159
conf/E-hentai.conf
Normal file
159
conf/E-hentai.conf
Normal file
@ -0,0 +1,159 @@
|
|||||||
|
# E-Hentai Start
|
||||||
|
upstream exhentai-lb {
|
||||||
|
server 178.175.128.252:443;
|
||||||
|
server 178.175.128.254:443;
|
||||||
|
server 178.175.129.252:443;
|
||||||
|
server 178.175.129.254:443;
|
||||||
|
server 178.175.132.20:443;
|
||||||
|
server 178.175.132.22:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name exhentai.org;
|
||||||
|
server_name *.exhentai.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://exhentai-lb/;
|
||||||
|
proxy_next_upstream_timeout 75;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream e-hentai-lb {
|
||||||
|
server 212.7.202.35:443;
|
||||||
|
server 212.7.202.48:443;
|
||||||
|
server 212.7.200.92:443;
|
||||||
|
server 212.7.200.95:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name e-hentai.org;
|
||||||
|
server_name r.e-hentai.org;
|
||||||
|
server_name g.e-hentai.org;
|
||||||
|
server_name lofi.e-hentai.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://e-hentai-lb/;
|
||||||
|
proxy_next_upstream_timeout 100;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream forums-e-hentai-lb {
|
||||||
|
server 94.100.18.243:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name forums.e-hentai.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://94.100.18.243:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream api-e-hentai-lb {
|
||||||
|
server 212.7.202.51:443;
|
||||||
|
server 212.7.200.104:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name api.e-hentai.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://api-e-hentai-lb/;
|
||||||
|
include proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream upload-e-hentai-lb {
|
||||||
|
server 94.100.18.247:443;
|
||||||
|
server 94.100.18.249:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name upld.e-hentai.org;
|
||||||
|
server_name upload.e-hentai.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
client_max_body_size 400M;
|
||||||
|
fastcgi_connect_timeout 3000;
|
||||||
|
fastcgi_send_timeout 3000;
|
||||||
|
fastcgi_read_timeout 3000;
|
||||||
|
proxy_pass https://upload-e-hentai-lb/;
|
||||||
|
include proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream ehgt-org {
|
||||||
|
server [2a00:7c80:0:12d::38a1]:443 max_fails=4 fail_timeout=60s;
|
||||||
|
server [2a00:7c80:0:13b::37a4]:443 max_fails=4 fail_timeout=60s;
|
||||||
|
server [2a00:7c80:0:123::3a85]:443 max_fails=4 fail_timeout=60s;
|
||||||
|
server 89.39.106.43:443 max_fails=4 fail_timeout=60s;
|
||||||
|
server 62.112.8.21:443 max_fails=4 fail_timeout=60s;
|
||||||
|
server 109.236.85.28:443 max_fails=4 fail_timeout=60s;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen 127.0.0.2:443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name ehgt.org;
|
||||||
|
|
||||||
|
access_log logs/E-hentai-access.log main buffer=4k;
|
||||||
|
error_log logs/E-hentai-error.log;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://ehgt-org/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# E-Hentai End
|
14
conf/GV.conf
Normal file
14
conf/GV.conf
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
proxy_max_temp_file_size 0;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
resolver 119.29.29.29:53 valid=1h ipv4=off ipv6=on;
|
||||||
|
if ( $http_host ~ (([\S\s]*).googlevideo.com) ){
|
||||||
|
proxy_pass https://$2.${domain_SUFFIX}:443;
|
||||||
|
#$2是匹配上的变量部分
|
||||||
|
}
|
||||||
|
proxy_set_header Range $http_range;
|
||||||
|
proxy_set_header If-Range $http_if_range;
|
||||||
|
include proxy.conf;
|
||||||
|
|
||||||
|
#access_log logs/GoogleVideo-access.log GoogleVideo buffer=4k gzip=4;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/GoogleVideo-error.log warn;
|
156
conf/GoogleVideo.conf
Normal file
156
conf/GoogleVideo.conf
Normal file
@ -0,0 +1,156 @@
|
|||||||
|
|
||||||
|
upstream Google-Video {
|
||||||
|
server 127.0.0.129:65496;
|
||||||
|
server 127.0.0.129:65497;
|
||||||
|
server 127.0.0.129:65498;
|
||||||
|
server 127.0.0.129:65499;
|
||||||
|
server 127.0.0.129:65500;
|
||||||
|
server 127.0.0.129:65501;
|
||||||
|
server 127.0.0.129:65502;
|
||||||
|
server 127.0.0.129:65503;
|
||||||
|
server 127.0.0.129:65504;
|
||||||
|
}
|
||||||
|
|
||||||
|
log_format GoogleVideo '[$time_local]- 请求耗时"$request_time" $http_host 服务器地址:$proxy_host $server_protocol\n 上游状态"$upstream_status" 上游地址:"$upstream_addr"\n $status 总字节数$body_bytes_sent';
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65496 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "offline-maps.gvt1.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65497 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "c.2mdn.net";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65498 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "bdn.dev";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65499 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "gvt1.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65500 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "xn--ngstr-lra8j.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65501 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "snap.gvt1.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65502 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "gcpcdn.gvt1.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65503 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "c.bigcache.googleapis.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 127.0.0.129:65504 ssl;
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
set $domain_SUFFIX "c.googlesyndication.com";
|
||||||
|
include GV.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# GoogleVideo.com
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
|
||||||
|
#access_log logs/GoogleVideo-access.gzip main gzip=4 buffer=4k;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/GoogleVideo-error.log;
|
||||||
|
|
||||||
|
server_name *.googlevideo.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
proxy_max_temp_file_size 0;
|
||||||
|
#resolver [::1]:53 valid=180s ipv4=off ipv6=on;
|
||||||
|
proxy_pass https://Google-Video;
|
||||||
|
proxy_set_header X-Host $host;
|
||||||
|
proxy_set_header Range $http_range;
|
||||||
|
proxy_set_header If-Range $http_if_range;
|
||||||
|
include Proxy.conf;
|
||||||
|
proxy_ssl_name $host;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# GoogleVideo End
|
||||||
|
|
||||||
|
|
||||||
|
# ggpht.com
|
||||||
|
upstream ggpht-com {
|
||||||
|
server [2607:f8b0:4002:c10::84]:443;
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
|
||||||
|
access_log off;
|
||||||
|
error_log logs/GoogleVideo-error.log;
|
||||||
|
|
||||||
|
server_name *.ggpht.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
location / {
|
||||||
|
proxy_max_temp_file_size 0;
|
||||||
|
proxy_pass https://ggpht-com;
|
||||||
|
proxy_next_upstream_timeout 30;
|
||||||
|
include proxy.conf;
|
||||||
|
proxy_set_header Range $http_range;
|
||||||
|
proxy_set_header If-Range $http_if_range;
|
||||||
|
}
|
||||||
|
}
|
30
conf/PayPal.conf
Normal file
30
conf/PayPal.conf
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
|
||||||
|
# PayPal Start
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name checkout.paypal.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $checkout_paypal d37t8d3i48djc7.cloudfront.net;
|
||||||
|
proxy_pass https://$checkout_paypal:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name c.paypal.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $c_paypal c-fastly.glb.paypal.com;
|
||||||
|
proxy_pass https://$c_paypal:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# PayPal End
|
492
conf/Pixiv.conf
Normal file
492
conf/Pixiv.conf
Normal file
@ -0,0 +1,492 @@
|
|||||||
|
upstream www-pixiv-net {
|
||||||
|
server 210.140.131.181:443;
|
||||||
|
server 210.140.131.183:443;
|
||||||
|
server 210.140.131.185:443;
|
||||||
|
server 210.140.131.219:443;
|
||||||
|
server 210.140.131.220:443;
|
||||||
|
server 210.140.131.222:443;
|
||||||
|
server 210.140.131.223:443;
|
||||||
|
server 210.140.131.224:443;
|
||||||
|
server 210.140.131.225:443;
|
||||||
|
server 210.140.131.226:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream account-pixiv-net {
|
||||||
|
server 210.140.131.219:443;
|
||||||
|
server 210.140.131.223:443;
|
||||||
|
server 210.140.131.226:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream ssl-pixiv-net {
|
||||||
|
server 210.140.92.192:443;
|
||||||
|
server 210.140.92.193:443;
|
||||||
|
server 210.140.92.183:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream sketch-pixiv-net {
|
||||||
|
server 210.140.174.37:443;
|
||||||
|
server 210.140.170.179:443;
|
||||||
|
server 210.140.175.130:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream sketch-hls-server {
|
||||||
|
server 210.140.214.211:443;
|
||||||
|
server 210.140.214.212:443;
|
||||||
|
server 210.140.214.213:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream imgaz-pixiv-net {
|
||||||
|
server 210.140.131.145:443;
|
||||||
|
server 210.140.131.144:443;
|
||||||
|
server 210.140.131.147:443;
|
||||||
|
server 210.140.131.153:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream i-pximg-net {
|
||||||
|
server 210.140.92.141:443;
|
||||||
|
server 210.140.92.142:443;
|
||||||
|
server 210.140.92.143:443;
|
||||||
|
server 210.140.92.144:443;
|
||||||
|
server 210.140.92.145:443;
|
||||||
|
server 210.140.92.146:443;
|
||||||
|
server 210.140.92.148:443;
|
||||||
|
server 210.140.92.149:443;
|
||||||
|
server 210.140.139.131:443;
|
||||||
|
server 210.140.139.132:443;
|
||||||
|
server 210.140.139.133:443;
|
||||||
|
server 210.140.139.134:443;
|
||||||
|
server 210.140.139.135:443;
|
||||||
|
server 210.140.139.136:443;
|
||||||
|
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream fanbox-cc {
|
||||||
|
server 210.140.92.179:443;
|
||||||
|
server 210.140.92.180:443;
|
||||||
|
server 210.140.92.181:443;
|
||||||
|
server 210.140.92.182:443;
|
||||||
|
server 210.140.92.183:443;
|
||||||
|
server 210.140.92.184:443;
|
||||||
|
server 210.140.92.185:443;
|
||||||
|
server 210.140.92.186:443;
|
||||||
|
server 210.140.92.187:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream app-api-pixiv-net {
|
||||||
|
server 210.140.131.218:443;
|
||||||
|
server 210.140.131.223:443;
|
||||||
|
server 210.140.131.226:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream AkamaiCDN {
|
||||||
|
server 184.27.185.73:443;
|
||||||
|
server 184.27.185.76:443;
|
||||||
|
server 184.26.43.79:443;
|
||||||
|
server 184.26.43.80:443;
|
||||||
|
server 184.26.91.162:443;
|
||||||
|
server 184.26.91.47:443;
|
||||||
|
server 23.48.201.10:443;
|
||||||
|
server 23.48.201.16:443;
|
||||||
|
server 23.48.201.33:443;
|
||||||
|
server 23.48.201.34:443;
|
||||||
|
server 23.49.104.47:443;
|
||||||
|
server 23.49.104.48:443;
|
||||||
|
server 23.49.104.197:443;
|
||||||
|
server 23.49.104.200:443;
|
||||||
|
server 23.49.104.201:443;
|
||||||
|
server 23.49.104.202:443;
|
||||||
|
server 23.202.34.90:443;
|
||||||
|
server 23.202.34.91:443;
|
||||||
|
server 23.202.34.120:443;
|
||||||
|
server 23.202.34.250:443;
|
||||||
|
server 23.202.35.57:443;
|
||||||
|
server 23.202.35.90:443;
|
||||||
|
server 23.202.35.120:443;
|
||||||
|
server 23.202.35.250:443;
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_time 1h;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
|
||||||
|
# default_server Start
|
||||||
|
server {
|
||||||
|
listen 80 default_server;
|
||||||
|
listen [::]:80 default_server;
|
||||||
|
access_log off;
|
||||||
|
rewrite ^(.*) https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
# default_server End
|
||||||
|
|
||||||
|
# Pixiv Start
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name www.pixiv.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://www-pixiv-net;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name accounts.pixiv.net;
|
||||||
|
server_name oauth.secure.pixiv.net;
|
||||||
|
server_name source.pixiv.net;
|
||||||
|
server_name app-api.pixiv.net;
|
||||||
|
server_name payment.pixiv.net;
|
||||||
|
server_name sensei.pixiv.net;
|
||||||
|
server_name dic.pixiv.net;
|
||||||
|
server_name en-dic.pixiv.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://account-pixiv-net/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name pixiv.net;
|
||||||
|
server_name ssl.pixiv.net;
|
||||||
|
server_name touch.pixiv.net;
|
||||||
|
server_name factory.pixiv.net;
|
||||||
|
server_name fanbox.pixiv.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://ssl-pixiv-net;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name *.pximg.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://i-pximg-net;
|
||||||
|
include Proxy.conf;
|
||||||
|
proxy_next_upstream_timeout 60;
|
||||||
|
proxy_set_header Referer "https://www.pixiv.net/";
|
||||||
|
proxy_set_header Sec-Fetch-Site "cross-site";
|
||||||
|
allow all;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name downloads.fanbox.cc;
|
||||||
|
server_name *.fanbox.cc;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://fanbox-cc/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name sketch.pixiv.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://sketch-pixiv-net;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Proxying WebSockets
|
||||||
|
location /ws/ {
|
||||||
|
proxy_pass https://sketch-pixiv-net;
|
||||||
|
include proxy.params;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name *.pixivsketch.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://sketch-hls-server;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name imgaz.pixiv.net;
|
||||||
|
server_name comic.pixiv.net;
|
||||||
|
server_name novel.pixiv.net;
|
||||||
|
server_name i1.pixiv.net;
|
||||||
|
server_name i2.pixiv.net;
|
||||||
|
server_name i3.pixiv.net;
|
||||||
|
server_name i4.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://imgaz-pixiv-net;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# Pixiv End
|
||||||
|
|
||||||
|
# Wiki Start
|
||||||
|
upstream wikipedia-text-lb {
|
||||||
|
server 208.80.153.224:443;
|
||||||
|
server 185.15.58.224:443;
|
||||||
|
server [2620:0:863:ed1a::1]:443;
|
||||||
|
server [2620:0:861:ed1a::1]:443;
|
||||||
|
server [2620:0:860:ed1a::1]:443;
|
||||||
|
server [2001:df2:e500:ed1a::1]:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name *.wikipedia.org;
|
||||||
|
server_name *.m.wikipedia.org;
|
||||||
|
server_name wikimedia.org;
|
||||||
|
server_name *.wikimedia.org;
|
||||||
|
server_name *.m.wikimedia.org;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://wikipedia-text-lb/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream wikipedia-upload-lb {
|
||||||
|
server 208.80.153.240:443;
|
||||||
|
server 208.80.154.240:443;
|
||||||
|
server [2620:0:863:ed1a::2:b]:443;
|
||||||
|
server [2620:0:861:ed1a::2:b]:443;
|
||||||
|
server [2620:0:860:ed1a::2:b]:443;
|
||||||
|
server [2001:df2:e500:ed1a::2:b]:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name upload.wikimedia.org;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://wikipedia-upload-lb/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# Wiki End
|
||||||
|
|
||||||
|
# archiveofourown Start
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name *.archiveofourown.org;
|
||||||
|
server_name archiveofourown.org;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://104.153.64.122:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# archiveofourown End
|
||||||
|
|
||||||
|
# Nyaa Start
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name sukebei.nyaa.si;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://198.251.89.38:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name nyaa.si;
|
||||||
|
server_name www.nyaa.si;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://185.178.208.182:443/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# Nyaa End
|
||||||
|
|
||||||
|
# github Start
|
||||||
|
upstream Github-com {
|
||||||
|
server 20.205.243.166:443;
|
||||||
|
server 20.27.177.113:443;
|
||||||
|
server 20.200.245.247:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream githubusercontent-com {
|
||||||
|
server 185.199.109.133:443;
|
||||||
|
server 185.199.108.133:443;
|
||||||
|
server 185.199.110.133:443;
|
||||||
|
server 185.199.111.133:443;
|
||||||
|
server 146.75.112.133:443;
|
||||||
|
server 146.75.20.133:443;
|
||||||
|
server 151.101.64.133:443;
|
||||||
|
server 151.101.76.133:443;
|
||||||
|
#server 151.101.108.133:443;
|
||||||
|
server 151.101.128.133:443;
|
||||||
|
server 151.101.192.133:443;
|
||||||
|
#server 151.101.228.133:443;
|
||||||
|
server 199.232.208.133:443;
|
||||||
|
server 199.232.212.133:443;
|
||||||
|
server 199.232.232.133:443;
|
||||||
|
server [2a04:4e42:75::133]:443;
|
||||||
|
server [2a04:4e42:76::133]:443;
|
||||||
|
server [2a04:4e42:82::133]:443;
|
||||||
|
server [2a04:4e42:8c::133]:443;
|
||||||
|
server [2a04:4e42:4d::133]:443;
|
||||||
|
server [2a04:4e42:4c::133]:443;
|
||||||
|
|
||||||
|
server [2a04:4e42:12::133]:443;
|
||||||
|
server [2a04:4e42:15::133]:443;
|
||||||
|
server [2a04:4e42:1a::133]:443;
|
||||||
|
server [2a04:4e42:36::133]:443;
|
||||||
|
server [2a04:4e42:48::133]:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name github.com;
|
||||||
|
server_name *.github.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://Github-com/;
|
||||||
|
include Proxy.conf;
|
||||||
|
proxy_headers_hash_max_size 8192;
|
||||||
|
proxy_buffer_size 128k;
|
||||||
|
proxy_buffers 4 256k;
|
||||||
|
proxy_busy_buffers_size 256k;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name githubusercontent.com;
|
||||||
|
server_name *.githubusercontent.com;
|
||||||
|
server_name githubassets.com;
|
||||||
|
server_name *.githubassets.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://githubusercontent-com/;
|
||||||
|
include Proxy.conf;
|
||||||
|
proxy_set_header Range $http_range;
|
||||||
|
proxy_set_header If-Range $http_if_range;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# github End
|
||||||
|
|
||||||
|
# EA Start
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name origin-a.akamaihd.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://AkamaiCDN/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name api1.origin.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "api2.origin.com";
|
||||||
|
proxy_pass https://$rewrite_host/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name pc.ea.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "e8688.e12.akamaiedge.net";
|
||||||
|
proxy_pass https://$rewrite_host/;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# EA End
|
8
conf/Proxy.conf
Normal file
8
conf/Proxy.conf
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
proxy_connect_timeout 5;
|
||||||
|
proxy_set_header Connection '';
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_ssl_server_name on;
|
247
conf/Steam.conf
Normal file
247
conf/Steam.conf
Normal file
@ -0,0 +1,247 @@
|
|||||||
|
upstream steam-store {
|
||||||
|
#server 184.24.82.108:443 max_fails=5 fail_timeout=60s;#HighPing
|
||||||
|
#server 23.1.179.144:443 max_fails=5 fail_timeout=60s;#HighPing
|
||||||
|
#server 23.195.152.91:443 max_fails=5 fail_timeout=60s;#HighPing
|
||||||
|
server 104.71.48.121:443 max_fails=5 fail_timeout=60s;
|
||||||
|
server 23.45.56.78:443 max_fails=5 fail_timeout=60s;
|
||||||
|
server 184.85.112.102:443 max_fails=5 fail_timeout=60s;
|
||||||
|
server 184.87.103.42:443 max_fails=5 fail_timeout=60s;
|
||||||
|
server 23.77.215.46:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.51.142.168:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.41.77.6:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.36.106.129:443 max_fails=5 fail_timeout=60s;#HighPing
|
||||||
|
server 23.36.252.78:443 max_fails=5 fail_timeout=60s;#HighPing
|
||||||
|
server 23.208.81.63:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.200.148.81:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.200.152.81:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.219.73.99:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.211.57.127:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.219.69.47:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
server 23.48.229.101:443 max_fails=5 fail_timeout=60s;#
|
||||||
|
keepalive 16;
|
||||||
|
keepalive_time 1h;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 10000;
|
||||||
|
}
|
||||||
|
upstream steam-community {
|
||||||
|
server 23.1.179.144:443;
|
||||||
|
server 104.103.145.69:443;
|
||||||
|
server 104.91.87.202:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
#upstream steam-community302 {
|
||||||
|
# server str001.steam302.xyz:443;
|
||||||
|
# server str002.steam302.xyz:443;
|
||||||
|
# server str003.steam302.xyz:443;
|
||||||
|
#}
|
||||||
|
|
||||||
|
# Steam Start
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name *.steamcommunity.com;
|
||||||
|
server_name steamcommunity.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location ^.*(discussions|comment|forum).*$ {
|
||||||
|
set $rewrite_host "str003.steam302.xyz";
|
||||||
|
proxy_pass https://$rewrite_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
include proxy.params;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://steam-community/;
|
||||||
|
|
||||||
|
proxy_next_upstream_timeout 60;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
#resolver public1.alidns.com valid=300;
|
||||||
|
server_name store.steampowered.com;
|
||||||
|
server_name api.steampowered.com;
|
||||||
|
server_name checkout.steampowered.com;
|
||||||
|
server_name help.steampowered.com;
|
||||||
|
server_name login.steampowered.com;
|
||||||
|
server_name steampowered.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
#access_log logs/SteamCDN-access.log main;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://steam-store/;
|
||||||
|
proxy_next_upstream error timeout http_403 http_429 http_500 http_502 http_503 http_504 non_idempotent;
|
||||||
|
proxy_next_upstream_timeout 90;
|
||||||
|
include Proxy.conf;
|
||||||
|
#proxy_ssl_name $http_host;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name community.akamai.steamstatic.com;
|
||||||
|
server_name community.cloudflare.steamstatic.com;
|
||||||
|
server_name community.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://AkamaiCDN;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_next_upstream_timeout 60;
|
||||||
|
proxy_connect_timeout 5;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
proxy_next_upstream error timeout http_403 http_429 http_500 http_502 http_503 http_504 non_idempotent;
|
||||||
|
proxy_set_header Host "community.steamstatic.com";
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_ssl_server_name off;
|
||||||
|
proxy_ssl_name "community.steamstatic.com";
|
||||||
|
proxy_buffering off;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name steamuserimages-a.akamaihd.net;
|
||||||
|
server_name steamcdn-a.akamaihd.net;
|
||||||
|
server_name steamcommunity-a.akamaihd.net;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
#set $rewrite_host "${http_host}.edgesuite.net";
|
||||||
|
#proxy_pass https://$rewrite_host;
|
||||||
|
proxy_pass https://AkamaiCDN;
|
||||||
|
include Proxy.conf;
|
||||||
|
proxy_ssl_name $http_host;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
#SteamStatic 国内cdn:白山云eccdnx:st.dl.eccdnx.com
|
||||||
|
#阿里昆仑雀牛云cdn.queniuqe.com
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name cdn.cloudflare.steamstatic.com cdn.akamai.steamstatic.com cdn.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "media.st.dl.eccdnx.com";
|
||||||
|
include SteamCDN..conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name clan.steamstatic.com clan.akamai.steamstatic.com clan.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "clan.st.dl.eccdnx.com";
|
||||||
|
include SteamCDN..conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name avatars.steamstatic.com avatars.akamai.steamstatic.com avatars.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "avatars.st.dl.eccdnx.com";
|
||||||
|
include SteamCDN..conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name store.steamstatic.com store.akamai.steamstatic.com store.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "store.st.dl.eccdnx.com";
|
||||||
|
include SteamCDN..conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name shared.steamstatic.com shared.akamai.steamstatic.com shared.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "shared.st.dl.eccdnx.com";
|
||||||
|
include SteamCDN..conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name video.steamstatic.com video.akamai.steamstatic.com video.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "video.steamstatic.com.edgesuite.net";
|
||||||
|
resolver public1.alidns.com valid=300 ipv4=on ipv6=off;
|
||||||
|
proxy_pass https://$rewrite_host;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_connect_timeout 5;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
proxy_set_header Host "video.steamstatic.com";
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_ssl_server_name off;
|
||||||
|
proxy_ssl_name "video.steamstatic.com";
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name steambroadcast.akamaized.net broadcast.akamai.steamstatic.com broadcast.cloudflare.steamstatic.com;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $rewrite_host "${http_host}.edgesuite.net";
|
||||||
|
resolver public1.alidns.com valid=300 ipv4=on ipv6=off;
|
||||||
|
proxy_pass https://AkamaiCDN;
|
||||||
|
include Proxy.conf;
|
||||||
|
#proxy_ssl_name $source_host;
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Steam End
|
14
conf/SteamCDN..conf
Normal file
14
conf/SteamCDN..conf
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
resolver 119.29.29.29 valid=300 ipv4=on ipv6=on;# ipv4=on ipv6=off
|
||||||
|
proxy_pass https://$rewrite_host;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_connect_timeout 3;
|
||||||
|
keepalive_timeout 120;
|
||||||
|
proxy_set_header Connection "";
|
||||||
|
proxy_set_header Host $rewrite_host;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_ssl_server_name off;
|
||||||
|
|
||||||
|
access_log off;
|
||||||
|
error_log logs/SteamCDN-error.log;
|
31
conf/WallHaven.conf
Normal file
31
conf/WallHaven.conf
Normal file
@ -0,0 +1,31 @@
|
|||||||
|
# WallHaven Start
|
||||||
|
upstream WallHaven-cc {
|
||||||
|
server 15.235.80.145:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl http2;
|
||||||
|
listen [::]:443 ssl http2;
|
||||||
|
server_name wallhaven.cc;
|
||||||
|
server_name w.wallhaven.cc;
|
||||||
|
server_name www.wallhaven.cc;
|
||||||
|
server_name th.wallhaven.cc;
|
||||||
|
server_name static.wallhaven.cc;
|
||||||
|
server_name alpha.wallhaven.cc;
|
||||||
|
|
||||||
|
include cert.conf;
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_max_temp_file_size 0;
|
||||||
|
proxy_pass https://15.235.80.145/;
|
||||||
|
proxy_buffer_size 64k;
|
||||||
|
proxy_buffers 32 64k;
|
||||||
|
proxy_busy_buffers_size 128k;
|
||||||
|
#proxy_set_header X-Host $host;
|
||||||
|
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
#proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
include Proxy.conf;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# WallHaven End
|
BIN
conf/ca/ca.cer
BIN
conf/ca/ca.cer
Binary file not shown.
@ -1,71 +1,93 @@
|
|||||||
Certificate:
|
Certificate:
|
||||||
Data:
|
Data:
|
||||||
Version: 3 (0x2)
|
Version: 3 (0x2)
|
||||||
Serial Number: 5 (0x5)
|
Serial Number: 17 (0x11)
|
||||||
Signature Algorithm: sha256WithRSAEncryption
|
Signature Algorithm: sha256WithRSAEncryption
|
||||||
Issuer: C=CN, ST=Shanghai, L=Shanghai, O=Mashiro LLC, OU=Mashiro, CN=Mashiro Internet Authority CA
|
Issuer: C=CN, ST=Shanghai, L=Shanghai, O=Mashiro LLC, CN=Mashiro Internet Fake Authority CA
|
||||||
Validity
|
Validity
|
||||||
Not Before: Sep 16 16:57:32 2018 GMT
|
Not Before: Oct 16 17:18:43 2020 GMT
|
||||||
Not After : Sep 13 16:57:32 2028 GMT
|
Not After : Oct 14 17:18:43 2030 GMT
|
||||||
Subject: C=CN, ST=Shanghai, O=Mashiro LLC, OU=Mashiro, CN=*.pixiv.net
|
Subject: C=CN, ST=Shanghai, O=Mashiro LLC, CN=SNI\xE4\xBB\xA3\xE7\x90\x86\xE9\x80\x9A\xE7\x94\xA8\xE8\xAF\x81\xE4\xB9\xA6\xEF\xBC\x88https://2heng.xin/2017/09/19/pixiv/\xEF\xBC\x89
|
||||||
Subject Public Key Info:
|
Subject Public Key Info:
|
||||||
Public Key Algorithm: rsaEncryption
|
Public Key Algorithm: rsaEncryption
|
||||||
Public-Key: (2048 bit)
|
RSA Public-Key: (2048 bit)
|
||||||
Modulus:
|
Modulus:
|
||||||
00:a9:84:77:44:2f:77:cf:5a:de:59:4c:ce:15:c1:
|
00:ce:00:18:cc:64:70:ac:59:b0:45:9e:c3:ee:9e:
|
||||||
bc:db:6d:43:1e:6f:f2:2e:46:f5:a4:74:bc:f6:92:
|
9b:b2:56:59:43:aa:b7:98:6b:bb:86:86:c9:bb:b6:
|
||||||
60:77:b2:cd:79:bf:d7:65:2b:54:78:48:6d:ab:2f:
|
ed:54:b8:56:de:ec:18:06:62:59:27:3b:d2:16:4a:
|
||||||
6b:f8:63:c1:69:a1:1d:b2:b5:78:e4:2b:b7:ad:62:
|
8a:86:ad:40:2b:69:6a:dc:21:12:4b:ca:fd:85:a8:
|
||||||
d6:14:aa:7a:24:97:72:d2:81:f7:e3:d7:b4:76:1f:
|
01:dd:ec:2a:20:a2:6e:b0:c2:a7:79:88:f9:f4:34:
|
||||||
94:de:74:5c:b0:b1:6c:31:21:2f:c4:3e:58:41:3b:
|
95:fb:85:bf:f0:c7:1d:57:29:f8:a5:62:e3:b6:9e:
|
||||||
ab:06:e5:8a:28:80:fd:c3:a1:b5:dc:db:c7:4f:62:
|
52:f7:42:2a:0c:5a:5c:6d:b4:30:51:4e:c1:40:57:
|
||||||
bd:cc:ff:ee:b5:e9:21:5f:9b:88:20:ab:c3:36:f9:
|
c6:58:57:18:47:9c:59:9d:b7:38:bb:cc:0c:68:aa:
|
||||||
82:22:3c:88:6e:d9:69:cd:ad:c0:2b:5e:19:68:e7:
|
6c:68:76:be:6f:84:83:12:ef:60:2d:11:61:d8:01:
|
||||||
ff:2a:64:90:24:32:07:ab:2c:67:a9:ab:2d:75:ef:
|
f0:09:85:8c:80:fa:f0:f6:23:95:c7:97:c1:86:53:
|
||||||
85:26:df:37:67:c3:53:31:0e:9c:8c:58:aa:24:f3:
|
97:b5:d5:dc:5b:a8:f8:22:49:0a:70:2d:92:77:17:
|
||||||
e2:5f:2b:1c:fc:72:45:34:94:9b:b4:69:cb:ef:a3:
|
41:fd:0e:ba:5b:a7:ce:8f:60:a1:fc:5a:a7:87:19:
|
||||||
6d:8f:f7:ab:4c:83:77:84:e8:ac:e6:b7:17:58:e8:
|
1f:12:f6:c8:b2:32:f4:a8:22:72:ec:97:cc:98:48:
|
||||||
c2:47:ce:08:35:32:9a:45:79:15:e4:f4:07:92:ee:
|
24:b3:4d:c4:83:7b:9e:1d:15:62:63:37:f5:b6:0c:
|
||||||
79:64:cc:41:6b:5d:a4:4c:46:72:2f:5a:7a:66:38:
|
4f:b5:97:33:87:1f:67:cd:0b:bb:71:7b:38:60:c5:
|
||||||
df:3d:58:8f:02:79:4b:ea:0f:8b:0c:33:cc:41:79:
|
4f:2f:ad:40:44:0a:8e:af:0c:6c:5a:f4:00:6d:94:
|
||||||
0f:3c:16:91:0c:67:44:6d:42:7e:1c:cb:2f:d6:1f:
|
a3:f3:ae:f2:eb:5e:14:68:0a:03:5b:c7:89:09:d0:
|
||||||
6b:fb
|
f9:bd
|
||||||
Exponent: 65537 (0x10001)
|
Exponent: 65537 (0x10001)
|
||||||
X509v3 extensions:
|
X509v3 extensions:
|
||||||
|
X509v3 Subject Key Identifier:
|
||||||
|
4C:B9:F4:49:C1:82:B5:1E:3A:81:63:FA:0C:15:78:A5:F7:4A:AF:FF
|
||||||
|
X509v3 Authority Key Identifier:
|
||||||
|
keyid:3F:6C:37:71:8F:74:1B:28:5A:0F:C2:29:C1:2B:05:7E:D1:24:D4:54
|
||||||
|
|
||||||
X509v3 Basic Constraints:
|
X509v3 Basic Constraints:
|
||||||
CA:FALSE
|
CA:FALSE
|
||||||
|
X509v3 Key Usage:
|
||||||
|
Digital Signature, Key Encipherment
|
||||||
X509v3 Subject Alternative Name:
|
X509v3 Subject Alternative Name:
|
||||||
DNS:*.pixiv.net, DNS:pixiv.net, DNS:*.secure.pixiv.net, DNS:pximg.net, DNS:*.pximg.net, DNS:wikipedia.org, DNS:*.wikipedia.org, DNS:google.com, DNS:*.google.com, IP Address:127.0.0.1
|
DNS:*.pixiv.net, DNS:pixiv.net, DNS:*.secure.pixiv.net, DNS:pixivision.net, DNS:*.pixivision.net, DNS:pixiv.me, DNS:*.pixiv.me, DNS:pximg.net, DNS:*.pximg.net, DNS:pixivsketch.net, DNS:*.pixivsketch.net, DNS:public-api.secure.pixiv.net, DNS:wikipedia.org, DNS:*.wikipedia.org, DNS:m.wikipedia.org, DNS:*.m.wikipedia.org, DNS:google.com, DNS:*.google.com, DNS:steamcommunity.com, DNS:*.steamcommunity.com, DNS:steampowered.com, DNS:*.steampowered.com, DNS:archiveofourown.org, DNS:*.archiveofourown.org, DNS:wikimedia.org, DNS:*.wikimedia.org
|
||||||
X509v3 Subject Key Identifier:
|
|
||||||
A7:E1:07:03:F4:8A:62:A6:32:C3:98:CC:C1:3E:37:33:56:22:DA:21
|
|
||||||
Signature Algorithm: sha256WithRSAEncryption
|
Signature Algorithm: sha256WithRSAEncryption
|
||||||
8d:e9:35:fa:68:71:c0:12:f5:d1:4c:2a:91:29:96:e5:7c:26:
|
74:95:98:78:3d:2d:7b:24:ae:59:9c:9e:84:d1:77:e0:47:92:
|
||||||
1c:05:66:29:31:42:c1:9f:fb:2f:6c:2f:47:20:1d:dd:d2:c4:
|
81:28:27:98:e8:4d:b0:83:8d:f9:92:d2:59:2c:e4:be:9f:14:
|
||||||
7f:4d:df:a6:0b:91:13:bc:38:28:87:aa:a5:f5:6b:88:fb:04:
|
4f:3e:e1:1e:49:d3:4a:b7:37:22:4c:45:cd:29:8d:5b:aa:fe:
|
||||||
92:ad:d2:3f:82:70:5e:de:e5:bd:74:f2:86:c0:22:61:61:30:
|
cb:63:59:21:e0:0b:ea:69:0c:5b:92:09:e6:25:fe:1a:7e:2f:
|
||||||
e1:02:02:1d:89:6d:97:38:cb:0b:32:bb:37:32:08:7f:5e:ab:
|
a6:3c:a4:71:a7:11:5c:5c:8c:aa:31:ff:42:c3:be:3d:d2:df:
|
||||||
15:79:93:e6:8f:d0:40:78:5b:b0:a2:b0:d2:e5:04:01:65:74:
|
37:9e:47:35:f6:94:d1:af:0a:99:7a:39:07:25:86:7f:ae:bf:
|
||||||
bf:57:42:ea:9c:5b:93:c6:96:26:34:bc:f0:d7:46:6a:ad:7c:
|
2d:a8:a6:5f:98:84:54:01:1d:09:32:b0:21:2b:23:d7:81:13:
|
||||||
2f:92
|
99:3d:5c:9b:ba:ce:7b:53:8d:2f:c2:39:a5:93:9b:fa:e2:31:
|
||||||
|
ce:77:5a:e2:38:a3:f0:95:9a:a7:6b:67:92:93:a4:63:a5:24:
|
||||||
|
63:88:21:e9:38:4d:a4:21:d2:a3:67:3c:70:9a:f3:df:f6:45:
|
||||||
|
26:b4:18:23:05:04:9f:2f:7e:fd:db:85:b5:e4:c0:71:c6:b4:
|
||||||
|
52:d4:dc:cd:91:1f:65:f1:d9:17:8c:d9:03:38:f5:7c:2a:e2:
|
||||||
|
3c:e1:43:66:5a:01:cb:5e:56:6b:e4:78:83:17:01:f1:b0:25:
|
||||||
|
b1:00:c5:37:81:83:94:9d:36:7a:3e:aa:81:23:2b:b1:90:b8:
|
||||||
|
ea:fe:eb:e2
|
||||||
-----BEGIN CERTIFICATE-----
|
-----BEGIN CERTIFICATE-----
|
||||||
MIIDnDCCAwWgAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCQ04x
|
MIIFljCCBH6gAwIBAgIBETANBgkqhkiG9w0BAQsFADB2MQswCQYDVQQGEwJDTjER
|
||||||
ETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQHDAhTaGFuZ2hhaTEUMBIGA1UECgwL
|
MA8GA1UECBMIU2hhbmdoYWkxETAPBgNVBAcTCFNoYW5naGFpMRQwEgYDVQQKEwtN
|
||||||
TWFzaGlybyBMTEMxEDAOBgNVBAsMB01hc2hpcm8xJjAkBgNVBAMMHU1hc2hpcm8g
|
YXNoaXJvIExMQzErMCkGA1UEAxMiTWFzaGlybyBJbnRlcm5ldCBGYWtlIEF1dGhv
|
||||||
SW50ZXJuZXQgQXV0aG9yaXR5IENBMB4XDTE4MDkxNjE2NTczMloXDTI4MDkxMzE2
|
cml0eSBDQTAeFw0yMDEwMTYxNzE4NDNaFw0zMDEwMTQxNzE4NDNaMH8xCzAJBgNV
|
||||||
NTczMlowXjELMAkGA1UEBhMCQ04xETAPBgNVBAgMCFNoYW5naGFpMRQwEgYDVQQK
|
BAYTAkNOMREwDwYDVQQIEwhTaGFuZ2hhaTEUMBIGA1UEChMLTWFzaGlybyBMTEMx
|
||||||
DAtNYXNoaXJvIExMQzEQMA4GA1UECwwHTWFzaGlybzEUMBIGA1UEAwwLKi5waXhp
|
RzBFBgNVBAMUPlNOSeS7o+eQhumAmueUqOivgeS5pu+8iGh0dHBzOi8vMmhlbmcu
|
||||||
di5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphHdEL3fPWt5Z
|
eGluLzIwMTcvMDkvMTkvcGl4aXYv77yJMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
|
||||||
TM4VwbzbbUMeb/IuRvWkdLz2kmB3ss15v9dlK1R4SG2rL2v4Y8FpoR2ytXjkK7et
|
MIIBCgKCAQEAzgAYzGRwrFmwRZ7D7p6bslZZQ6q3mGu7hobJu7btVLhW3uwYBmJZ
|
||||||
YtYUqnokl3LSgffj17R2H5TedFywsWwxIS/EPlhBO6sG5YoogP3DobXc28dPYr3M
|
JzvSFkqKhq1AK2lq3CESS8r9hagB3ewqIKJusMKneYj59DSV+4W/8McdVyn4pWLj
|
||||||
/+616SFfm4ggq8M2+YIiPIhu2WnNrcArXhlo5/8qZJAkMgerLGepqy1174Um3zdn
|
tp5S90IqDFpcbbQwUU7BQFfGWFcYR5xZnbc4u8wMaKpsaHa+b4SDEu9gLRFh2AHw
|
||||||
w1MxDpyMWKok8+JfKxz8ckU0lJu0acvvo22P96tMg3eE6KzmtxdY6MJHzgg1MppF
|
CYWMgPrw9iOVx5fBhlOXtdXcW6j4IkkKcC2SdxdB/Q66W6fOj2Ch/FqnhxkfEvbI
|
||||||
eRXk9AeS7nlkzEFrXaRMRnIvWnpmON89WI8CeUvqD4sMM8xBeQ88FpEMZ0RtQn4c
|
sjL0qCJy7JfMmEgks03Eg3ueHRViYzf1tgxPtZczhx9nzQu7cXs4YMVPL61ARAqO
|
||||||
yy/WH2v7AgMBAAGjgb8wgbwwCQYDVR0TBAIwADCBjwYDVR0RBIGHMIGEggsqLnBp
|
rwxsWvQAbZSj867y614UaAoDW8eJCdD5vQIDAQABo4ICJDCCAiAwHQYDVR0OBBYE
|
||||||
eGl2Lm5ldIIJcGl4aXYubmV0ghIqLnNlY3VyZS5waXhpdi5uZXSCCXB4aW1nLm5l
|
FEy59EnBgrUeOoFj+gwVeKX3Sq//MB8GA1UdIwQYMBaAFD9sN3GPdBsoWg/CKcEr
|
||||||
dIILKi5weGltZy5uZXSCDXdpa2lwZWRpYS5vcmeCDyoud2lraXBlZGlhLm9yZ4IK
|
BX7RJNRUMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMIIBxAYDVR0RBIIBuzCCAbeC
|
||||||
Z29vZ2xlLmNvbYIMKi5nb29nbGUuY29thwR/AAABMB0GA1UdDgQWBBSn4QcD9Ipi
|
CyoucGl4aXYubmV0gglwaXhpdi5uZXSCEiouc2VjdXJlLnBpeGl2Lm5ldIIOcGl4
|
||||||
pjLDmMzBPjczViLaITANBgkqhkiG9w0BAQsFAAOBgQCN6TX6aHHAEvXRTCqRKZbl
|
aXZpc2lvbi5uZXSCECoucGl4aXZpc2lvbi5uZXSCCHBpeGl2Lm1lggoqLnBpeGl2
|
||||||
fCYcBWYpMULBn/svbC9HIB3d0sR/Td+mC5ETvDgoh6ql9WuI+wSSrdI/gnBe3uW9
|
Lm1lgglweGltZy5uZXSCCyoucHhpbWcubmV0gg9waXhpdnNrZXRjaC5uZXSCESou
|
||||||
dPKGwCJhYTDhAgIdiW2XOMsLMrs3Mgh/XqsVeZPmj9BAeFuworDS5QQBZXS/V0Lq
|
cGl4aXZza2V0Y2gubmV0ghtwdWJsaWMtYXBpLnNlY3VyZS5waXhpdi5uZXSCDXdp
|
||||||
nFuTxpYmNLzw10ZqrXwvkg==
|
a2lwZWRpYS5vcmeCDyoud2lraXBlZGlhLm9yZ4IPbS53aWtpcGVkaWEub3JnghEq
|
||||||
|
Lm0ud2lraXBlZGlhLm9yZ4IKZ29vZ2xlLmNvbYIMKi5nb29nbGUuY29tghJzdGVh
|
||||||
|
bWNvbW11bml0eS5jb22CFCouc3RlYW1jb21tdW5pdHkuY29tghBzdGVhbXBvd2Vy
|
||||||
|
ZWQuY29tghIqLnN0ZWFtcG93ZXJlZC5jb22CE2FyY2hpdmVvZm91cm93bi5vcmeC
|
||||||
|
FSouYXJjaGl2ZW9mb3Vyb3duLm9yZ4INd2lraW1lZGlhLm9yZ4IPKi53aWtpbWVk
|
||||||
|
aWEub3JnMA0GCSqGSIb3DQEBCwUAA4IBAQB0lZh4PS17JK5ZnJ6E0XfgR5KBKCeY
|
||||||
|
6E2wg435ktJZLOS+nxRPPuEeSdNKtzciTEXNKY1bqv7LY1kh4AvqaQxbkgnmJf4a
|
||||||
|
fi+mPKRxpxFcXIyqMf9Cw7490t83nkc19pTRrwqZejkHJYZ/rr8tqKZfmIRUAR0J
|
||||||
|
MrAhKyPXgROZPVybus57U40vwjmlk5v64jHOd1riOKPwlZqna2eSk6RjpSRjiCHp
|
||||||
|
OE2kIdKjZzxwmvPf9kUmtBgjBQSfL37924W15MBxxrRS1NzNkR9l8dkXjNkDOPV8
|
||||||
|
KuI84UNmWgHLXlZr5HiDFwHxsCWxAMU3gYOUnTZ6PqqBIyuxkLjq/uvi
|
||||||
-----END CERTIFICATE-----
|
-----END CERTIFICATE-----
|
||||||
|
@ -1,28 +1,27 @@
|
|||||||
-----BEGIN PRIVATE KEY-----
|
-----BEGIN RSA PRIVATE KEY-----
|
||||||
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCphHdEL3fPWt5Z
|
MIIEpQIBAAKCAQEAzgAYzGRwrFmwRZ7D7p6bslZZQ6q3mGu7hobJu7btVLhW3uwY
|
||||||
TM4VwbzbbUMeb/IuRvWkdLz2kmB3ss15v9dlK1R4SG2rL2v4Y8FpoR2ytXjkK7et
|
BmJZJzvSFkqKhq1AK2lq3CESS8r9hagB3ewqIKJusMKneYj59DSV+4W/8McdVyn4
|
||||||
YtYUqnokl3LSgffj17R2H5TedFywsWwxIS/EPlhBO6sG5YoogP3DobXc28dPYr3M
|
pWLjtp5S90IqDFpcbbQwUU7BQFfGWFcYR5xZnbc4u8wMaKpsaHa+b4SDEu9gLRFh
|
||||||
/+616SFfm4ggq8M2+YIiPIhu2WnNrcArXhlo5/8qZJAkMgerLGepqy1174Um3zdn
|
2AHwCYWMgPrw9iOVx5fBhlOXtdXcW6j4IkkKcC2SdxdB/Q66W6fOj2Ch/Fqnhxkf
|
||||||
w1MxDpyMWKok8+JfKxz8ckU0lJu0acvvo22P96tMg3eE6KzmtxdY6MJHzgg1MppF
|
EvbIsjL0qCJy7JfMmEgks03Eg3ueHRViYzf1tgxPtZczhx9nzQu7cXs4YMVPL61A
|
||||||
eRXk9AeS7nlkzEFrXaRMRnIvWnpmON89WI8CeUvqD4sMM8xBeQ88FpEMZ0RtQn4c
|
RAqOrwxsWvQAbZSj867y614UaAoDW8eJCdD5vQIDAQABAoIBAQCgRA0G/2F1hTWR
|
||||||
yy/WH2v7AgMBAAECggEAWSrltYcmhXrt5JlC+izLk7x4hsUp5e/LfHMvhp/egHgc
|
hIp02+rP3UQHVAsQR0iWycirBQ8xqVTUjCPI27z2vCCffRC25JUW8SXU6tncI6oH
|
||||||
H0OrIHtXVmH61gX+zExky5RFU+CjM5pPZrPLmllGIINNka9t3npzYYMhQpaAvyzE
|
0QTazgCccSLi3B4FfN7R8hN5or4IqjCWfq3Wpc/5ZMWxXkVuZOKh6tzodPf+ggtq
|
||||||
lV84igilUcL6JomNT9ryIPqp9//fakGtRu0E+skjle/w/gZ7jCpYqnue5HgWcGpu
|
8R+PnwFNpZ065e4FhAlhYHiaNCLxl+sG4MHov+a1saGCuYRIiLnZv3pj165DZod8
|
||||||
cUTABq96kRzY8winNZcfbBw2uIdpKGDXMxWnepVbhNNzXpns0ivJ7+MrUSKLX1a2
|
zNIRY7alcpzBbf+um/G4no6naRHJ0Kev9e1HgWjbVfZYtO+kiIowOvNq1XSLJ0KD
|
||||||
nCPQkRjAZHYMgRIKfPbSwcyRcHHsO5CyCY71uiqFBy2aDtamD/r9QOFTEdvTMddf
|
ZO16XOAD5YrLW3hgCsdFxfyvwMpnCPJwbg2t6NbEeR/8gOn64zs1bkMLuvecY7rr
|
||||||
aP1RU8eSb2mDDrWPySbkYTGuehcfXcroxBFkQnRn0QKBgQDbB6qyIF/bVVATZBpR
|
c7yhZqVBAoGBAOhTYK3zj7/lc/xoUanR6Fr8QIRXE/YZ4f1EGDX4PT2Hga36gTwI
|
||||||
TBu1CQuiowEbvSm+XCA2vig4A5IJ6JnUaS+wc2BBM2RUBLYbHKb4lEGGmpnGGHCD
|
IOS9Vjx/0kUlZFmvoCV7mMcDwJMTE8BBjYp+N/DvaRkDau67WDwJVFxoEZVvW5ni
|
||||||
sxy64PhAvzWqbn9hvU3HwDwPZzUqWGHq9yaFbgD/LK/Vl57ow/oRV7a0u9hAJOPx
|
I0uoRIBaP4r8FkSI6j56BuKj+7msFS3zL+MgQ8ujvsztJq4uiFmnUogtAoGBAOL9
|
||||||
mR70uqvfr6HTMbCmjY/k4TfvAwKBgQDGIVpLo+Bjz62c8YJEiOqQjB1yFuqRP4OH
|
+i85EGOOi3vrrdEVy9goFcA5HT9qT+jvtUaqFwHCB4cZEsGx2hNaOVVWm6rBIQtb
|
||||||
K6MmyMEc6H2619RyyrDbkMNVpwHNwChTUNcwAqFYvEqRGrvQ5dO8whYxEli/0cIR
|
Zfg+VqEKaQisjcKAa/8HZ6xApdtSNyWR+OoA7VzRsc+SzhdHkgbsMQifQbEKEe49
|
||||||
jOgzbGLXst3nIbzm30MeknnoWVCrMiqXeCNtwnUifKS4WvBs0Bdn4KBZTiytNN6K
|
yFVm8xrP/rnVrq87gsrvQcyMH0FB4ljZ4wGWqiHRAoGBAIIYpoviVv3zZGbUl95L
|
||||||
xhZJPgvhqQKBgDADKDnPuvN7agg2I0a65j/y8af/D1kjSClATJdza6GLttGROVdE
|
wByrIwm4pWHrjoQ/jHs0Xj7FUdX18EaImrrcV50bSskTrkUWtswmkR/otv7k8Ot5
|
||||||
j32gbPMd7to0Bi8/QqKu7QYykY7JALD97EhS1FhtEbiAbE/ijVBCJWhC+XaE1UIK
|
CeSi13qg5i5unoO+/yLnaokwcaBHsnjSjEdCm9FwOCMBFQsdzGZd+NsTTtPjTBzm
|
||||||
V1lcWb+V7h1mFSF1BDYVAinwG2FENOta41xGJzLrbw+6jryTv30umXI9AoGBAL2k
|
EEvUdoJjWGXy6vUg85OYwfulAoGBAKYE9kAlr2vxbOlUxctf8riFEOuHmnGwUwPe
|
||||||
JPJrjBbdLJchDwgcaTAr/O88Ag8+1N0npoUz+Kt72QRjG4U4fynaGS29qdtPRwng
|
lqo5axxZCmJwHzzV1NdErRxSfQZVvNJupdT72yZr08iJVCGHBfYAN35Pxj70EeuD
|
||||||
QehBTEBMEa9sAEOGCDIPMACOSAZqdrAnyAWYg89j9EQMJexx3KPBnhAIlU8XuG68
|
qReVWAYERNW53MxAB3jStUZGHKjc4aJrQ6Pa6UGaEQdgVyRJFW9RsMFnVtDG3EL6
|
||||||
3mRrkYSN+3g+CwyL7StPdQul6Nts1GnOCnzWd7bpAoGBANkO5h+oUhd4y8tCX3vX
|
EcMuq/6RAoGAWm7c5pdbj1p3bvOrfHpsWrv/qFzozB5LRk2bYwosMASSyLwX6+TF
|
||||||
mT98imjvCnvW1KTKa9YHL0OEH5aEPKDzUwHyqtUJCsw7YTk0+z/XtiVm9/V/1t76
|
3QCWL7VOnLQJvQ5ffCWWSs7Ds9kJ/gvIVyelgT6DsyKwi19rjueRix3nFg1faAmI
|
||||||
Dllt7KaEI6MszXD8QgBDpkCp8N2zmTT5URKbV33odGXYJPcA908RiqDCBmw3zxjZ
|
whLZvr+KVwLYjDYfNmKBwbV8KLZAf5fZ3q9l4lf3rjaQLcfL3LiaUUk=
|
||||||
cCSu7rDx8R2i8DFU9frXY81l
|
-----END RSA PRIVATE KEY-----
|
||||||
-----END PRIVATE KEY-----
|
|
||||||
|
2
conf/cert.conf
Normal file
2
conf/cert.conf
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
@ -1,17 +1,17 @@
|
|||||||
-----BEGIN CERTIFICATE-----
|
-----BEGIN CERTIFICATE-----
|
||||||
MIICxDCCAaygAwIBAgIIVHb1I+71EegwDQYJKoZIhvcNAQELBQAwDzENMAsGA1UE
|
MIICxDCCAaygAwIBAgIIdFTrJJMBNZwwDQYJKoZIhvcNAQELBQAwDzENMAsGA1UE
|
||||||
AwwEV25tcDAeFw0xODA5MTYxNTMxMDZaFw0yODA5MTYxNTMxMDZaMA8xDTALBgNV
|
AwwEV25tcDAeFw0xODA5MjUxNDM3MDNaFw0yODA5MjUxNDM3MDNaMA8xDTALBgNV
|
||||||
BAMMBFdubXAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6c6zZZyP
|
BAMMBFdubXAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCqQtQ07hG
|
||||||
zref4Nmd6N0aqIQLeJcwhpSZNiw0S44+oROrZ8aVfoRLkBbe2uGDwpjh9G9C+RaX
|
9gWcJNzRxREXpEODgKa8MPeaNw2pXFdU79Irp4ft0ilERmxZJ7THb3GZqsfIiMEN
|
||||||
QukIuvQY0iPycM69oEk8xLfK2qLRn8gPjmmzLoqjkUDtvzGU9aYcNP5wkeOzQHFy
|
9Bm9h2GvF7NDydo7zdO2Yhn7ELqUs/Msl7yFGAyfg7uS+nxCsQRzVt/xiQR0xJtx
|
||||||
w5ZEjqv9ZxrhTSeZr6m6cRNA2nexUjSp2j8cRcecXMxgfFdN4T2VkXwo0PSm5cb7
|
fXGXEv92HDWRi6lLcjyyEgErx72upHBKYAl7lVHMHvZab1cmUuOz0KiMa0MC+/9p
|
||||||
tw3lSmOMaHEB156I7JP8zeacLiN6tmsqcq9bdl4BFzWNjMCYH+d3B78zhzRLiZjp
|
uOWsYjEqEgAnaBzb1eUo1/S12za2zWVCbKDV8xkCi86AVOLIIwMFPE9BREYvYY9D
|
||||||
aqDQwc/LggkbVwFgSeYIFgWGhztFMxCgItMYJqdgShK/xK09A5PFebONbEGRuejw
|
+I+RoCWf0h/u0U/Nytw/T8EOcDLHkW1/siX7bYaFCmsvFvUr4hT5790YUmRpeGcw
|
||||||
88cPYCHkWFx3AgMBAAGjJDAiMCAGCWCGSAGG+EIBDQQTDBFHZW5lcmF0ZWQgYnkg
|
Wic1fsqcYTWZAgMBAAGjJDAiMCAGCWCGSAGG+EIBDQQTDBFHZW5lcmF0ZWQgYnkg
|
||||||
V25tcDANBgkqhkiG9w0BAQsFAAOCAQEAAD+Vl7W/kX+fD6bZp4BBRHe9eYE7XM9B
|
V25tcDANBgkqhkiG9w0BAQsFAAOCAQEAHwCoHBxe5pBHLMys3mPFRkafPkr0vPiK
|
||||||
aft8KR6kxzGXdQqIT1dAfFeTd49XeLLMXeVl9idGHAinl64ZCrDyjEDEPsIAoYf2
|
Nxq1l2gjH8k6bW7ez9WraovpJiAIxTkJGYMT2exK9LchsadkRxJ4tZ/osOrBT6Qe
|
||||||
nzgpTrv9qExghRXp/1jTRZ6HBHEXHHLlDBHCfw+pHw6R53W28RN7Em7vvu222DpT
|
nxKo8Oym+8QxgSVhYSdxOZm9SYpv9f2HTTVRvG7l2WyvDny1+Uh9zGg4MKW5yVXZ
|
||||||
0mRO1CSm+OCRuw1pPq5Z9SiNDI52bB6XIyq+QE7jNuQCWG8eRV66fVBdEr99wL2e
|
a6fmHlzcR/AGds2pKSirbLCmp5/R6rvHRR1nBgqP9FUdEFvbu4V4gCh2Z1oVGyoU
|
||||||
6ZTVfKKM3sfvmHNY45roRhqTRyibA9X7fnz4fBa8uBmbSCBAfebI6HvzStInqJOQ
|
atbI8U0DfmbDeHoWjkWG+KPfVxhNZJamIZ02t2/9edPLOLZFNoCreZr3F+BfkVil
|
||||||
DPdQyX9Ky87CRCyCRZFQJFe1eUfaMMQMN/pFNYiS518NFtIzSMHZZg==
|
75E3KWFLjqphhYhFrT69C4yxp6jDt/UncDRgX/bqSERJDZae8GP91A==
|
||||||
-----END CERTIFICATE-----
|
-----END CERTIFICATE-----
|
||||||
|
@ -1,4 +1,5 @@
|
|||||||
|
|
||||||
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
fastcgi_param QUERY_STRING $query_string;
|
fastcgi_param QUERY_STRING $query_string;
|
||||||
fastcgi_param REQUEST_METHOD $request_method;
|
fastcgi_param REQUEST_METHOD $request_method;
|
||||||
fastcgi_param CONTENT_TYPE $content_type;
|
fastcgi_param CONTENT_TYPE $content_type;
|
||||||
|
9
conf/iwaras.conf
Normal file
9
conf/iwaras.conf
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
access_log logs/iwara-access.gzip main gzip=4 buffer=4k;
|
||||||
|
error_log logs/iwara-error.log;
|
||||||
|
|
||||||
|
proxy_next_upstream_timeout 12;
|
||||||
|
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
include proxy.conf;
|
||||||
|
proxy_ssl_name $http_host;
|
50
conf/key.pem
50
conf/key.pem
@ -1,27 +1,27 @@
|
|||||||
-----BEGIN RSA PRIVATE KEY-----
|
-----BEGIN RSA PRIVATE KEY-----
|
||||||
MIIEowIBAAKCAQEAxenOs2Wcj863n+DZnejdGqiEC3iXMIaUmTYsNEuOPqETq2fG
|
MIIEogIBAAKCAQEAgqkLUNO4RvYFnCTc0cURF6RDg4CmvDD3mjcNqVxXVO/SK6eH
|
||||||
lX6ES5AW3trhg8KY4fRvQvkWl0LpCLr0GNIj8nDOvaBJPMS3ytqi0Z/ID45psy6K
|
7dIpREZsWSe0x29xmarHyIjBDfQZvYdhrxezQ8naO83TtmIZ+xC6lLPzLJe8hRgM
|
||||||
o5FA7b8xlPWmHDT+cJHjs0BxcsOWRI6r/Wca4U0nma+punETQNp3sVI0qdo/HEXH
|
n4O7kvp8QrEEc1bf8YkEdMSbcX1xlxL/dhw1kYupS3I8shIBK8e9rqRwSmAJe5VR
|
||||||
nFzMYHxXTeE9lZF8KND0puXG+7cN5UpjjGhxAdeeiOyT/M3mnC4jerZrKnKvW3Ze
|
zB72Wm9XJlLjs9CojGtDAvv/abjlrGIxKhIAJ2gc29XlKNf0tds2ts1lQmyg1fMZ
|
||||||
ARc1jYzAmB/ndwe/M4c0S4mY6Wqg0MHPy4IJG1cBYEnmCBYFhoc7RTMQoCLTGCan
|
AovOgFTiyCMDBTxPQURGL2GPQ/iPkaAln9If7tFPzcrcP0/BDnAyx5Ftf7Il+22G
|
||||||
YEoSv8StPQOTxXmzjWxBkbno8PPHD2Ah5FhcdwIDAQABAoIBAC5fI3bGMqJBSaX0
|
hQprLxb1K+IU+e/dGFJkaXhnMFonNX7KnGE1mQIDAQABAoIBAAzM1hCfXTCJI42O
|
||||||
vZhxtMinvlSfuzD7/3pMhpv0Lg5/mEe7h3yEicPYrXsm5tsD7+VVa/JRwZjMbSSG
|
HZqTTWmygZwIEM2OQoN3cegt5VmrJjzOlxtuTkqjrN5NwdZpODN6A+5vr0dYVY6N
|
||||||
BWaBajnGc7JbiX1rDDND+g1Ktknq0NpSZ9p+UKvD9f6Udgi64/kFPchEq7A7ooxK
|
Ymgj0JULLkz+N10Ts+s2UquvYVr0q9b3adfVW506MCLccqIrWERc9vR1hQDo7XrZ
|
||||||
r4Kus04h0UsBrS+JifzSk2PhQoSfPDQ+RtzUy9qTh8dTj4CUf3CYBTMPDPmbvSRx
|
CpvIhwWbgq9NzAe/NHbUhOREtGzPYwHFjWpzuZlXTeeLVIDIuQ7IqekLNi/JgebT
|
||||||
qwsNOqrcMf9Wn/g2jk6FFtnjsN+lE3x2Zy+kuYDNfGNnUDg9XghalUXFOxnFqFcO
|
FcTA8CzlKbgPueFwy8cQ21ZMqEY+1qRDIKKtcCVJ5tztbHJN5xrHgTWT+Jo8wOL5
|
||||||
UxttpbT3qoMOtk4agIh8HJ9697CgN7OfLWZ+dxpJYbOLiLLr6IotiEWI0bStTC4t
|
EHhUI+jTReTREOnYqnvWvJRmI5rUg81Z80krO/quYGnBXrSbqL/WcdTMYyth6sV6
|
||||||
CXRaZxUCgYEA7V10bfad9zpvilHfa+Q73z5eBfyfTAJYMvo/FhjKPgSqsBtkIIYz
|
TL1Vw00CgYEAzR4UNBezpI/QbmRhmsG29gc+8X6t4ZnuByc+EnB8NHtjXWHJBccs
|
||||||
3GvZy4JqZbWYNvmvBCzQGehtRsZpzkKviUWDxYEbHDfL7lNh7DHrcjmrlUFWhT3I
|
uAklK4q7AqJMqt+JoyLBUjzxPp8eRYRzkXZ7J/VV1hnDqrB1xz/RrvWgyBS6qo8X
|
||||||
ZYgIPQASwpMPwRz6Xsc2T2YgBDRAX25PSGAY6tBAymGTarLltxOBHO0CgYEA1XN0
|
QDutghbTP4tQQPlVGV6EvbOoxkkyDt7DiKTyqBM60z71zJNknGwrmBcCgYEAoxKW
|
||||||
UBWiR40KWjhHBowqSqYFb95LcqtE4pE8158tGqOAZDp9s3n16phNpvOlF9CH9ebC
|
MDFIlnov011tAo0sCDbffqbbbn0e5QvLN/9tpV+lzGMDKLp+MrLTiKkZ+mnuuMQq
|
||||||
3SAPTk0ShNUkbcDb+mI0L8ZUkKIJOgA6ESJS9X++OEkK6Yqt8U0u8WgI79atQGoB
|
4G/PegO/4B+LN9GUhIHA1pIy0Yu1ktguw33KEjjz+Uq1dAO0pGxezdvlpAHocRoO
|
||||||
6Zee5NbQP43223CwJE4K0YhDX+d+bAZMoGzMFnMCgYB3fQciX/ZvQSRrLgHZj0Aw
|
TLqNEyz/qfFNnIXA1//hOxkGug7GcxYeFE/Sfc8CgYBpZI0o/wy0/5gvQLDOHb7u
|
||||||
hnXQb7ZFDh0WNHFTj1En3TOLiY5i7QvoVwaBcvpajwq8Cf73jBOKJz3zVehnY5x3
|
x2ZWG6sogjlFv6orO1T2enfh4X6y01Zs8XYB23Sfs9kE63sDMbZ3lQy4CnY5bgcb
|
||||||
7t2BrBdYoiHvrFvsCckrbCqa7RQ/6LUbn1n+Uy4ecueIYC0NTx1g5NkTJLaPE7mn
|
tO8u5uZF7lMVfznlOSt6ZIdKhywquv9NZ9yNPUEqI2EHIZXSRTibaJbN24o3DcsW
|
||||||
hnCkrAchmfMa0EnhWlkxlQKBgCLKcLjk7dBvwrI13g3JJtOH//bd6rpEBDRRq/MR
|
iPqN1eOh63XMuec2YHY93QKBgBhqK/pDJq8A1DA9CJkdMb55GLUJnkjIituYDHDx
|
||||||
NM7Uu4aaqgZo6JZWQMHnkI8zJBYGiNh180i180DHZOqmtrQ28X6f+wSgBJT5mH1W
|
2SStUVFscYijg0lr5KfNSYpoWcln9VNs6g9GiG+xyVIuGqJMGucFNH6TADhgDYBP
|
||||||
dOMi8SRHc4nhWryr8ezTIjHFcfO/05P5bKKsCMFzKDtYQL2KIuVIKoMlPkvpMvAr
|
UPWxeTWVrd0UwPLtFrSTe6o2buqgEAwE0iJQ1mZHLmuEyv6L3NjQQmWQ2L1aTl6U
|
||||||
C5DVAoGBAIQ/B0/pr9HDr23Vdnwd5har7rEomat+1LXAdtcJAGF3yIxMNSxqn7Ep
|
JNuZAoGAEb13ZbzqLtaodrKMqJwKa6pzhi9F8+o/GOutV2PXOFgUBszrjyDShIUv
|
||||||
KNGMfj5x6BrfXtujmCKbqcaXV0mpDIXpNyqJViCa6t6Z3Hjk/c4vBBods5ssHFeL
|
sJ+C1y4+dFmgEulxZNVnzOg0t+wgD1cdr/MPsGhF96FGszLOUjKz15QyPoD8xkAS
|
||||||
W+62bkHmws1OFb61d/ko+GojOchLxeoLIQ41vIdzQQzv+Th8w8VM
|
Fk3EBth9Pj4FQ+U2ACUdJbX0QaWWdCEwRca7PUzfEePqJllgZWM=
|
||||||
-----END RSA PRIVATE KEY-----
|
-----END RSA PRIVATE KEY-----
|
||||||
|
@ -15,6 +15,8 @@ types {
|
|||||||
text/vnd.wap.wml wml;
|
text/vnd.wap.wml wml;
|
||||||
text/x-component htc;
|
text/x-component htc;
|
||||||
|
|
||||||
|
image/avif avif;
|
||||||
|
image/bmp bmp;
|
||||||
image/png png;
|
image/png png;
|
||||||
image/svg+xml svg svgz;
|
image/svg+xml svg svgz;
|
||||||
image/tiff tif tiff;
|
image/tiff tif tiff;
|
||||||
@ -22,9 +24,10 @@ types {
|
|||||||
image/webp webp;
|
image/webp webp;
|
||||||
image/x-icon ico;
|
image/x-icon ico;
|
||||||
image/x-jng jng;
|
image/x-jng jng;
|
||||||
image/x-ms-bmp bmp;
|
|
||||||
|
|
||||||
application/font-woff woff;
|
font/woff woff;
|
||||||
|
font/woff2 woff2;
|
||||||
|
|
||||||
application/java-archive jar war ear;
|
application/java-archive jar war ear;
|
||||||
application/json json;
|
application/json json;
|
||||||
application/mac-binhex40 hqx;
|
application/mac-binhex40 hqx;
|
||||||
@ -33,6 +36,7 @@ types {
|
|||||||
application/postscript ps eps ai;
|
application/postscript ps eps ai;
|
||||||
application/rtf rtf;
|
application/rtf rtf;
|
||||||
application/vnd.apple.mpegurl m3u8;
|
application/vnd.apple.mpegurl m3u8;
|
||||||
|
application/vnd.debian.binary-package deb udeb;
|
||||||
application/vnd.google-earth.kml+xml kml;
|
application/vnd.google-earth.kml+xml kml;
|
||||||
application/vnd.google-earth.kmz kmz;
|
application/vnd.google-earth.kmz kmz;
|
||||||
application/vnd.ms-excel xls;
|
application/vnd.ms-excel xls;
|
||||||
@ -48,7 +52,9 @@ types {
|
|||||||
xlsx;
|
xlsx;
|
||||||
application/vnd.openxmlformats-officedocument.wordprocessingml.document
|
application/vnd.openxmlformats-officedocument.wordprocessingml.document
|
||||||
docx;
|
docx;
|
||||||
|
application/vnd.rar rar;
|
||||||
application/vnd.wap.wmlc wmlc;
|
application/vnd.wap.wmlc wmlc;
|
||||||
|
application/wasm wasm;
|
||||||
application/x-7z-compressed 7z;
|
application/x-7z-compressed 7z;
|
||||||
application/x-cocoa cco;
|
application/x-cocoa cco;
|
||||||
application/x-java-archive-diff jardiff;
|
application/x-java-archive-diff jardiff;
|
||||||
@ -56,7 +62,6 @@ types {
|
|||||||
application/x-makeself run;
|
application/x-makeself run;
|
||||||
application/x-perl pl pm;
|
application/x-perl pl pm;
|
||||||
application/x-pilot prc pdb;
|
application/x-pilot prc pdb;
|
||||||
application/x-rar-compressed rar;
|
|
||||||
application/x-redhat-package-manager rpm;
|
application/x-redhat-package-manager rpm;
|
||||||
application/x-sea sea;
|
application/x-sea sea;
|
||||||
application/x-shockwave-flash swf;
|
application/x-shockwave-flash swf;
|
||||||
@ -69,7 +74,6 @@ types {
|
|||||||
application/zip zip;
|
application/zip zip;
|
||||||
|
|
||||||
application/octet-stream bin exe dll;
|
application/octet-stream bin exe dll;
|
||||||
application/octet-stream deb;
|
|
||||||
application/octet-stream dmg;
|
application/octet-stream dmg;
|
||||||
application/octet-stream iso img;
|
application/octet-stream iso img;
|
||||||
application/octet-stream msi msp msm;
|
application/octet-stream msi msp msm;
|
||||||
|
246
conf/nginx.conf
246
conf/nginx.conf
@ -1,237 +1,51 @@
|
|||||||
|
|
||||||
#user nobody;
|
#user nobody;
|
||||||
worker_processes 1;
|
worker_processes 2;
|
||||||
|
|
||||||
#error_log logs/error.log;
|
#error_log logs/error.log;
|
||||||
#error_log logs/error.log notice;
|
#error_log logs/error.log notice;
|
||||||
#error_log logs/error.log info;
|
#error_log logs/error.log info;
|
||||||
|
|
||||||
#pid logs/nginx.pid;
|
#pid logs/nginx.pid;
|
||||||
|
|
||||||
|
|
||||||
events {
|
events {
|
||||||
worker_connections 1024;
|
worker_connections 32767;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
http {
|
http {
|
||||||
include mime.types;
|
resolver 119.29.29.29 valid=300s;
|
||||||
default_type application/octet-stream;
|
resolver_timeout 10s;
|
||||||
|
#include mime.types;
|
||||||
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
#default_type application/octet-stream;
|
||||||
# '$status $body_bytes_sent "$http_referer" '
|
ssl_protocols TLSv1.2 TLSv1.3 TLSv1 TLSv1.1 SSLv2 SSLv3;
|
||||||
# '"$http_user_agent" "$http_x_forwarded_for"';
|
#ssl_ciphers "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256";
|
||||||
|
log_format main '[$time_local]- 客户端地址:"$remote_addr" 请求耗时"$request_time" 域名:$http_host 监听地址:$server_addr 监听端口:$server_port $server_protocol\n 上游状态"$upstream_status" 上游地址:"$upstream_addr" $status 总字节数$body_bytes_sent\n "$http_referer" "$http_x_forwarded_for" \n "$request"\n';# "$http_user_agent"
|
||||||
#access_log logs/access.log main;
|
access_log logs/access.log main buffer=4k;
|
||||||
|
fastcgi_buffers 16 128k;
|
||||||
|
|
||||||
sendfile on;
|
sendfile on;
|
||||||
#tcp_nopush on;
|
#tcp_nopush on;
|
||||||
|
|
||||||
#keepalive_timeout 0;
|
#keepalive_timeout 0;
|
||||||
keepalive_timeout 65;
|
|
||||||
|
|
||||||
|
keepalive_timeout 120;
|
||||||
|
keepalive_requests 30000;
|
||||||
|
client_max_body_size 200m;
|
||||||
server_names_hash_max_size 512;
|
server_names_hash_max_size 512;
|
||||||
server_names_hash_bucket_size 1024;
|
server_names_hash_bucket_size 1024;
|
||||||
|
gzip on;
|
||||||
#gzip on;
|
include Pixiv.conf;
|
||||||
|
include E-hentai.conf;
|
||||||
upstream www-pixiv-net {
|
#include Steam.conf;
|
||||||
server 210.129.120.46:443;
|
#include DLsite.conf;#目前已不需要,只改hosts就行了
|
||||||
server 210.129.120.52:443;
|
#include Reddit.conf;
|
||||||
server 210.129.120.50:443;
|
#include Wallhaven.conf;
|
||||||
}
|
#include iwara.conf;#目前已不需要
|
||||||
|
#include Discord.conf;
|
||||||
upstream sketch-pixiv-net {
|
#include Twitter.conf;
|
||||||
server 210.140.174.37:443;
|
#include Twitch.conf;
|
||||||
server 210.140.170.179:443;
|
#include Instagram.conf;
|
||||||
server 210.140.175.130:443;
|
#include FaceBook.conf;
|
||||||
}
|
#include PayPal.conf;
|
||||||
|
#include nhentai.conf;
|
||||||
upstream imgaz-pixiv-net {
|
#include GoogleVideo.conf;
|
||||||
server 210.140.131.145:443;
|
|
||||||
server 210.140.131.144:443;
|
|
||||||
server 210.140.131.147:443;
|
|
||||||
server 210.140.131.153:443;
|
|
||||||
}
|
|
||||||
|
|
||||||
upstream i-pximg-net {
|
|
||||||
server 210.140.92.140:443;
|
|
||||||
server 210.140.92.137:443;
|
|
||||||
server 210.140.92.139:443;
|
|
||||||
server 210.140.92.142:443;
|
|
||||||
server 210.140.92.134:443;
|
|
||||||
server 210.140.92.141:443;
|
|
||||||
server 210.140.92.143:443;
|
|
||||||
server 210.140.92.135:443;
|
|
||||||
server 210.140.92.136:443;
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 80 default_server;
|
|
||||||
rewrite ^(.*) https://$host$1 permanent;
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name pixiv.net;
|
|
||||||
server_name www.pixiv.net;
|
|
||||||
server_name ssl.pixiv.net;
|
|
||||||
server_name accounts.pixiv.net;
|
|
||||||
server_name touch.pixiv.net;
|
|
||||||
server_name oauth.secure.pixiv.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
client_max_body_size 50M;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://www-pixiv-net;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name i.pximg.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://i-pximg-net;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name sketch.pixiv.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://sketch-pixiv-net;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxying WebSockets
|
|
||||||
location /ws/ {
|
|
||||||
proxy_pass https://sketch-pixiv-net;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name factory.pixiv.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://210.140.131.180/;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name dic.pixiv.net;
|
|
||||||
server_name en-dic.pixiv.net;
|
|
||||||
server_name sensei.pixiv.net;
|
|
||||||
server_name fanbox.pixiv.net;
|
|
||||||
server_name payment.pixiv.net.pixiv.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://210.129.120.50/;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name imgaz.pixiv.net;
|
|
||||||
server_name comic.pixiv.net;
|
|
||||||
server_name novel.pixiv.net;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://imgaz-pixiv-net;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name zh.wikipedia.org;
|
|
||||||
server_name zh-yue.wikipedia.org;
|
|
||||||
server_name wuu.wikipedia.org;
|
|
||||||
server_name ug.wikipedia.org;
|
|
||||||
server_name ja.wikipedia.org;
|
|
||||||
server_name zh.wikinews.org;
|
|
||||||
server_name zh.m.wikipedia.org;
|
|
||||||
server_name ug.m.wikipedia.org;
|
|
||||||
server_name zh.m.wikinews.org;
|
|
||||||
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
|
||||||
ssl_certificate_key ca/pixiv.net.key;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass https://103.102.166.224/;
|
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
}
|
502
conf/pixiv.conf
Normal file
502
conf/pixiv.conf
Normal file
@ -0,0 +1,502 @@
|
|||||||
|
upstream www-pixiv-net {
|
||||||
|
#server 104.18.12.135:443;
|
||||||
|
#server 104.18.13.135:443;
|
||||||
|
server 210.140.131.223:443;
|
||||||
|
server 210.140.131.225:443;
|
||||||
|
server 210.140.131.220:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream account-pixiv-net {
|
||||||
|
server 210.140.131.226:443;
|
||||||
|
server 210.140.131.218:443;
|
||||||
|
server 210.140.131.222:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream sketch-pixiv-net {
|
||||||
|
server 210.140.174.37:443;
|
||||||
|
server 210.140.170.179:443;
|
||||||
|
server 210.140.175.130:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream sketch-hls-server {
|
||||||
|
server 210.140.214.211:443;
|
||||||
|
server 210.140.214.212:443;
|
||||||
|
server 210.140.214.213:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream imgaz-pixiv-net {
|
||||||
|
server 210.140.131.145:443;
|
||||||
|
server 210.140.131.144:443;
|
||||||
|
server 210.140.131.147:443;
|
||||||
|
server 210.140.131.153:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream i-pximg-net {
|
||||||
|
server 210.140.92.140:443;
|
||||||
|
server 210.140.92.137:443;
|
||||||
|
server 210.140.92.139:443;
|
||||||
|
server 210.140.92.142:443;
|
||||||
|
server 210.140.92.134:443;
|
||||||
|
server 210.140.92.141:443;
|
||||||
|
server 210.140.92.143:443;
|
||||||
|
server 210.140.92.136:443;
|
||||||
|
server 210.140.92.138:443;
|
||||||
|
server 210.140.92.144:443;
|
||||||
|
server 210.140.92.145:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream app-api-pixiv-net {
|
||||||
|
server 210.140.131.218:443;
|
||||||
|
server 210.140.131.223:443;
|
||||||
|
server 210.140.131.226:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80 default_server;
|
||||||
|
rewrite ^(.*) https://$host$1 permanent;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name www.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
#proxy_ssl_server_name on;
|
||||||
|
proxy_pass https://www-pixiv-net;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name pixiv.net;
|
||||||
|
server_name ssl.pixiv.net;
|
||||||
|
server_name accounts.pixiv.net;
|
||||||
|
server_name touch.pixiv.net;
|
||||||
|
server_name oauth.secure.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
client_max_body_size 50M;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://account-pixiv-net;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name i.pximg.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
set $pximg_url i.pixiv.re;
|
||||||
|
|
||||||
|
#rewrite ^/(.*)$ https://$pximg_url/$1 redirect;
|
||||||
|
|
||||||
|
# proxy_pass https://i-pximg-net;
|
||||||
|
# proxy_set_header Host $http_host;
|
||||||
|
|
||||||
|
resolver 223.5.5.5;
|
||||||
|
proxy_pass https://$pximg_url;
|
||||||
|
proxy_set_header Host $pximg_url;
|
||||||
|
proxy_ssl_server_name on;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name sketch.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://sketch-pixiv-net;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Proxying WebSockets
|
||||||
|
location /ws/ {
|
||||||
|
proxy_pass https://sketch-pixiv-net;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name *.pixivsketch.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://sketch-hls-server;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name factory.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://210.140.131.180/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name dic.pixiv.net;
|
||||||
|
server_name en-dic.pixiv.net;
|
||||||
|
server_name sensei.pixiv.net;
|
||||||
|
server_name fanbox.pixiv.net;
|
||||||
|
server_name payment.pixiv.net.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://210.140.131.222/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name imgaz.pixiv.net;
|
||||||
|
server_name comic.pixiv.net;
|
||||||
|
server_name novel.pixiv.net;
|
||||||
|
server_name source.pixiv.net;
|
||||||
|
server_name i1.pixiv.net;
|
||||||
|
server_name i2.pixiv.net;
|
||||||
|
server_name i3.pixiv.net;
|
||||||
|
server_name i4.pixiv.net;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://imgaz-pixiv-net;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name app-api.pixiv.net;
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://app-api-pixiv-net;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name www.google.com;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location ^~ /recaptcha/ {
|
||||||
|
rewrite ^(.*)$ https://www.recaptcha.net$1 break;
|
||||||
|
}
|
||||||
|
|
||||||
|
location / {
|
||||||
|
default_type text/html;
|
||||||
|
charset utf-8;
|
||||||
|
return 200 'Pixiv-Nginx提醒:本工具默认代理了www.google.com,用于加载P站登陆时的验证码插件,如果你有方法正常访问www.google.com,并且不希望看到这个页面,那么将 <code>C:\Windows\System32\drivers\etc\hosts</code> 中 <code>127.0.0.1 www.google.com</code> 的那行记录删除即可。如果删除后刷新网页还是看到这个页面,请先清除一下浏览器缓存。';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream wikipedia-text-lb {
|
||||||
|
server 208.80.153.224:443;
|
||||||
|
#server 208.80.154.224:443;
|
||||||
|
server 91.198.174.192:443;
|
||||||
|
#server 103.102.166.224:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name *.wikipedia.org;
|
||||||
|
server_name *.m.wikipedia.org;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://wikipedia-text-lb/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name wikimedia.org;
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://wikipedia-text-lb/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
upstream wikipedia-upload-lb {
|
||||||
|
server 208.80.153.240:443;
|
||||||
|
server 208.80.154.240:443;
|
||||||
|
server 91.198.174.208:443;
|
||||||
|
server 103.102.166.240:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name upload.wikimedia.org;
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://wikipedia-upload-lb/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name *.steamcommunity.com;
|
||||||
|
server_name steamcommunity.com;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://23.61.176.149/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name *.steampowered.com;
|
||||||
|
server_name steampowered.com;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://104.112.84.145/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name *.archiveofourown.org;
|
||||||
|
server_name archiveofourown.org;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://104.153.64.122/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name nyaa.si;
|
||||||
|
server_name www.nyaa.si;
|
||||||
|
server_name sukebei.nyaa.si;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://185.178.208.182/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream exhentai-lb {
|
||||||
|
server 178.175.128.252:443;
|
||||||
|
server 178.175.128.254:443;
|
||||||
|
server 178.175.129.252:443;
|
||||||
|
server 178.175.129.254:443;
|
||||||
|
server 178.175.132.20:443;
|
||||||
|
server 178.175.132.22:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name exhentai.org;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://exhentai-lb/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
upstream e-hentai-lb {
|
||||||
|
server 104.20.26.25:443;
|
||||||
|
server 104.20.27.25:443;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name e-hentai.org;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://e-hentai-lb/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name forums.e-hentai.org;
|
||||||
|
|
||||||
|
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass https://94.100.18.243:443/;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
}
|
||||||
|
}
|
8
conf/proxy.params
Normal file
8
conf/proxy.params
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header User-Agent $http_user_agent;
|
||||||
|
proxy_set_header Accept-Encoding '';
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_ssl_server_name on;
|
||||||
|
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
#proxy_set_header X-Real_IP $remote_addr;
|
@ -108,6 +108,7 @@ syn keyword ngxDirectiveControl contained set
|
|||||||
syn keyword ngxDirectiveError contained error_page
|
syn keyword ngxDirectiveError contained error_page
|
||||||
syn keyword ngxDirectiveError contained post_action
|
syn keyword ngxDirectiveError contained post_action
|
||||||
|
|
||||||
|
syn keyword ngxDirectiveDeprecated contained limit_zone
|
||||||
syn keyword ngxDirectiveDeprecated contained proxy_downstream_buffer
|
syn keyword ngxDirectiveDeprecated contained proxy_downstream_buffer
|
||||||
syn keyword ngxDirectiveDeprecated contained proxy_upstream_buffer
|
syn keyword ngxDirectiveDeprecated contained proxy_upstream_buffer
|
||||||
syn keyword ngxDirectiveDeprecated contained spdy_chunk_size
|
syn keyword ngxDirectiveDeprecated contained spdy_chunk_size
|
||||||
@ -118,6 +119,7 @@ syn keyword ngxDirectiveDeprecated contained spdy_pool_size
|
|||||||
syn keyword ngxDirectiveDeprecated contained spdy_recv_buffer_size
|
syn keyword ngxDirectiveDeprecated contained spdy_recv_buffer_size
|
||||||
syn keyword ngxDirectiveDeprecated contained spdy_recv_timeout
|
syn keyword ngxDirectiveDeprecated contained spdy_recv_timeout
|
||||||
syn keyword ngxDirectiveDeprecated contained spdy_streams_index_size
|
syn keyword ngxDirectiveDeprecated contained spdy_streams_index_size
|
||||||
|
syn keyword ngxDirectiveDeprecated contained ssl
|
||||||
syn keyword ngxDirectiveDeprecated contained upstream_conf
|
syn keyword ngxDirectiveDeprecated contained upstream_conf
|
||||||
|
|
||||||
syn keyword ngxDirective contained absolute_redirect
|
syn keyword ngxDirective contained absolute_redirect
|
||||||
@ -136,6 +138,7 @@ syn keyword ngxDirective contained alias
|
|||||||
syn keyword ngxDirective contained allow
|
syn keyword ngxDirective contained allow
|
||||||
syn keyword ngxDirective contained ancient_browser
|
syn keyword ngxDirective contained ancient_browser
|
||||||
syn keyword ngxDirective contained ancient_browser_value
|
syn keyword ngxDirective contained ancient_browser_value
|
||||||
|
syn keyword ngxDirective contained api
|
||||||
syn keyword ngxDirective contained auth_basic
|
syn keyword ngxDirective contained auth_basic
|
||||||
syn keyword ngxDirective contained auth_basic_user_file
|
syn keyword ngxDirective contained auth_basic_user_file
|
||||||
syn keyword ngxDirective contained auth_http
|
syn keyword ngxDirective contained auth_http
|
||||||
@ -143,7 +146,11 @@ syn keyword ngxDirective contained auth_http_header
|
|||||||
syn keyword ngxDirective contained auth_http_pass_client_cert
|
syn keyword ngxDirective contained auth_http_pass_client_cert
|
||||||
syn keyword ngxDirective contained auth_http_timeout
|
syn keyword ngxDirective contained auth_http_timeout
|
||||||
syn keyword ngxDirective contained auth_jwt
|
syn keyword ngxDirective contained auth_jwt
|
||||||
|
syn keyword ngxDirective contained auth_jwt_claim_set
|
||||||
|
syn keyword ngxDirective contained auth_jwt_header_set
|
||||||
syn keyword ngxDirective contained auth_jwt_key_file
|
syn keyword ngxDirective contained auth_jwt_key_file
|
||||||
|
syn keyword ngxDirective contained auth_jwt_key_request
|
||||||
|
syn keyword ngxDirective contained auth_jwt_leeway
|
||||||
syn keyword ngxDirective contained auth_request
|
syn keyword ngxDirective contained auth_request
|
||||||
syn keyword ngxDirective contained auth_request_set
|
syn keyword ngxDirective contained auth_request_set
|
||||||
syn keyword ngxDirective contained autoindex
|
syn keyword ngxDirective contained autoindex
|
||||||
@ -229,6 +236,7 @@ syn keyword ngxDirective contained fastcgi_read_timeout
|
|||||||
syn keyword ngxDirective contained fastcgi_request_buffering
|
syn keyword ngxDirective contained fastcgi_request_buffering
|
||||||
syn keyword ngxDirective contained fastcgi_send_lowat
|
syn keyword ngxDirective contained fastcgi_send_lowat
|
||||||
syn keyword ngxDirective contained fastcgi_send_timeout
|
syn keyword ngxDirective contained fastcgi_send_timeout
|
||||||
|
syn keyword ngxDirective contained fastcgi_socket_keepalive
|
||||||
syn keyword ngxDirective contained fastcgi_split_path_info
|
syn keyword ngxDirective contained fastcgi_split_path_info
|
||||||
syn keyword ngxDirective contained fastcgi_store
|
syn keyword ngxDirective contained fastcgi_store
|
||||||
syn keyword ngxDirective contained fastcgi_store_access
|
syn keyword ngxDirective contained fastcgi_store_access
|
||||||
@ -255,6 +263,7 @@ syn keyword ngxDirective contained grpc_pass_header
|
|||||||
syn keyword ngxDirective contained grpc_read_timeout
|
syn keyword ngxDirective contained grpc_read_timeout
|
||||||
syn keyword ngxDirective contained grpc_send_timeout
|
syn keyword ngxDirective contained grpc_send_timeout
|
||||||
syn keyword ngxDirective contained grpc_set_header
|
syn keyword ngxDirective contained grpc_set_header
|
||||||
|
syn keyword ngxDirective contained grpc_socket_keepalive
|
||||||
syn keyword ngxDirective contained grpc_ssl_certificate
|
syn keyword ngxDirective contained grpc_ssl_certificate
|
||||||
syn keyword ngxDirective contained grpc_ssl_certificate_key
|
syn keyword ngxDirective contained grpc_ssl_certificate_key
|
||||||
syn keyword ngxDirective contained grpc_ssl_ciphers
|
syn keyword ngxDirective contained grpc_ssl_ciphers
|
||||||
@ -330,6 +339,8 @@ syn keyword ngxDirective contained keepalive
|
|||||||
syn keyword ngxDirective contained keepalive_disable
|
syn keyword ngxDirective contained keepalive_disable
|
||||||
syn keyword ngxDirective contained keepalive_requests
|
syn keyword ngxDirective contained keepalive_requests
|
||||||
syn keyword ngxDirective contained keepalive_timeout
|
syn keyword ngxDirective contained keepalive_timeout
|
||||||
|
syn keyword ngxDirective contained keyval
|
||||||
|
syn keyword ngxDirective contained keyval_zone
|
||||||
syn keyword ngxDirective contained kqueue_changes
|
syn keyword ngxDirective contained kqueue_changes
|
||||||
syn keyword ngxDirective contained kqueue_events
|
syn keyword ngxDirective contained kqueue_events
|
||||||
syn keyword ngxDirective contained large_client_header_buffers
|
syn keyword ngxDirective contained large_client_header_buffers
|
||||||
@ -367,6 +378,7 @@ syn keyword ngxDirective contained memcached_next_upstream_timeout
|
|||||||
syn keyword ngxDirective contained memcached_next_upstream_tries
|
syn keyword ngxDirective contained memcached_next_upstream_tries
|
||||||
syn keyword ngxDirective contained memcached_read_timeout
|
syn keyword ngxDirective contained memcached_read_timeout
|
||||||
syn keyword ngxDirective contained memcached_send_timeout
|
syn keyword ngxDirective contained memcached_send_timeout
|
||||||
|
syn keyword ngxDirective contained memcached_socket_keepalive
|
||||||
syn keyword ngxDirective contained merge_slashes
|
syn keyword ngxDirective contained merge_slashes
|
||||||
syn keyword ngxDirective contained min_delete_depth
|
syn keyword ngxDirective contained min_delete_depth
|
||||||
syn keyword ngxDirective contained mirror
|
syn keyword ngxDirective contained mirror
|
||||||
@ -375,9 +387,9 @@ syn keyword ngxDirective contained modern_browser
|
|||||||
syn keyword ngxDirective contained modern_browser_value
|
syn keyword ngxDirective contained modern_browser_value
|
||||||
syn keyword ngxDirective contained mp4
|
syn keyword ngxDirective contained mp4
|
||||||
syn keyword ngxDirective contained mp4_buffer_size
|
syn keyword ngxDirective contained mp4_buffer_size
|
||||||
syn keyword ngxDirective contained mp4_max_buffer_size
|
|
||||||
syn keyword ngxDirective contained mp4_limit_rate
|
syn keyword ngxDirective contained mp4_limit_rate
|
||||||
syn keyword ngxDirective contained mp4_limit_rate_after
|
syn keyword ngxDirective contained mp4_limit_rate_after
|
||||||
|
syn keyword ngxDirective contained mp4_max_buffer_size
|
||||||
syn keyword ngxDirective contained msie_padding
|
syn keyword ngxDirective contained msie_padding
|
||||||
syn keyword ngxDirective contained msie_refresh
|
syn keyword ngxDirective contained msie_refresh
|
||||||
syn keyword ngxDirective contained multi_accept
|
syn keyword ngxDirective contained multi_accept
|
||||||
@ -456,11 +468,13 @@ syn keyword ngxDirective contained proxy_protocol_timeout
|
|||||||
syn keyword ngxDirective contained proxy_read_timeout
|
syn keyword ngxDirective contained proxy_read_timeout
|
||||||
syn keyword ngxDirective contained proxy_redirect
|
syn keyword ngxDirective contained proxy_redirect
|
||||||
syn keyword ngxDirective contained proxy_request_buffering
|
syn keyword ngxDirective contained proxy_request_buffering
|
||||||
|
syn keyword ngxDirective contained proxy_requests
|
||||||
syn keyword ngxDirective contained proxy_responses
|
syn keyword ngxDirective contained proxy_responses
|
||||||
syn keyword ngxDirective contained proxy_send_lowat
|
syn keyword ngxDirective contained proxy_send_lowat
|
||||||
syn keyword ngxDirective contained proxy_send_timeout
|
syn keyword ngxDirective contained proxy_send_timeout
|
||||||
syn keyword ngxDirective contained proxy_set_body
|
syn keyword ngxDirective contained proxy_set_body
|
||||||
syn keyword ngxDirective contained proxy_set_header
|
syn keyword ngxDirective contained proxy_set_header
|
||||||
|
syn keyword ngxDirective contained proxy_socket_keepalive
|
||||||
syn keyword ngxDirective contained proxy_ssl
|
syn keyword ngxDirective contained proxy_ssl
|
||||||
syn keyword ngxDirective contained proxy_ssl_certificate
|
syn keyword ngxDirective contained proxy_ssl_certificate
|
||||||
syn keyword ngxDirective contained proxy_ssl_certificate_key
|
syn keyword ngxDirective contained proxy_ssl_certificate_key
|
||||||
@ -481,6 +495,7 @@ syn keyword ngxDirective contained proxy_temp_path
|
|||||||
syn keyword ngxDirective contained proxy_timeout
|
syn keyword ngxDirective contained proxy_timeout
|
||||||
syn keyword ngxDirective contained proxy_upload_rate
|
syn keyword ngxDirective contained proxy_upload_rate
|
||||||
syn keyword ngxDirective contained queue
|
syn keyword ngxDirective contained queue
|
||||||
|
syn keyword ngxDirective contained random
|
||||||
syn keyword ngxDirective contained random_index
|
syn keyword ngxDirective contained random_index
|
||||||
syn keyword ngxDirective contained read_ahead
|
syn keyword ngxDirective contained read_ahead
|
||||||
syn keyword ngxDirective contained real_ip_header
|
syn keyword ngxDirective contained real_ip_header
|
||||||
@ -533,6 +548,7 @@ syn keyword ngxDirective contained scgi_pass_request_headers
|
|||||||
syn keyword ngxDirective contained scgi_read_timeout
|
syn keyword ngxDirective contained scgi_read_timeout
|
||||||
syn keyword ngxDirective contained scgi_request_buffering
|
syn keyword ngxDirective contained scgi_request_buffering
|
||||||
syn keyword ngxDirective contained scgi_send_timeout
|
syn keyword ngxDirective contained scgi_send_timeout
|
||||||
|
syn keyword ngxDirective contained scgi_socket_keepalive
|
||||||
syn keyword ngxDirective contained scgi_store
|
syn keyword ngxDirective contained scgi_store
|
||||||
syn keyword ngxDirective contained scgi_store_access
|
syn keyword ngxDirective contained scgi_store_access
|
||||||
syn keyword ngxDirective contained scgi_temp_file_write_size
|
syn keyword ngxDirective contained scgi_temp_file_write_size
|
||||||
@ -565,7 +581,6 @@ syn keyword ngxDirective contained ssi_min_file_chunk
|
|||||||
syn keyword ngxDirective contained ssi_silent_errors
|
syn keyword ngxDirective contained ssi_silent_errors
|
||||||
syn keyword ngxDirective contained ssi_types
|
syn keyword ngxDirective contained ssi_types
|
||||||
syn keyword ngxDirective contained ssi_value_length
|
syn keyword ngxDirective contained ssi_value_length
|
||||||
syn keyword ngxDirective contained ssl
|
|
||||||
syn keyword ngxDirective contained ssl_buffer_size
|
syn keyword ngxDirective contained ssl_buffer_size
|
||||||
syn keyword ngxDirective contained ssl_certificate
|
syn keyword ngxDirective contained ssl_certificate
|
||||||
syn keyword ngxDirective contained ssl_certificate_key
|
syn keyword ngxDirective contained ssl_certificate_key
|
||||||
@ -573,6 +588,7 @@ syn keyword ngxDirective contained ssl_ciphers
|
|||||||
syn keyword ngxDirective contained ssl_client_certificate
|
syn keyword ngxDirective contained ssl_client_certificate
|
||||||
syn keyword ngxDirective contained ssl_crl
|
syn keyword ngxDirective contained ssl_crl
|
||||||
syn keyword ngxDirective contained ssl_dhparam
|
syn keyword ngxDirective contained ssl_dhparam
|
||||||
|
syn keyword ngxDirective contained ssl_early_data
|
||||||
syn keyword ngxDirective contained ssl_ecdh_curve
|
syn keyword ngxDirective contained ssl_ecdh_curve
|
||||||
syn keyword ngxDirective contained ssl_engine
|
syn keyword ngxDirective contained ssl_engine
|
||||||
syn keyword ngxDirective contained ssl_handshake_timeout
|
syn keyword ngxDirective contained ssl_handshake_timeout
|
||||||
@ -664,6 +680,7 @@ syn keyword ngxDirective contained uwsgi_pass_request_headers
|
|||||||
syn keyword ngxDirective contained uwsgi_read_timeout
|
syn keyword ngxDirective contained uwsgi_read_timeout
|
||||||
syn keyword ngxDirective contained uwsgi_request_buffering
|
syn keyword ngxDirective contained uwsgi_request_buffering
|
||||||
syn keyword ngxDirective contained uwsgi_send_timeout
|
syn keyword ngxDirective contained uwsgi_send_timeout
|
||||||
|
syn keyword ngxDirective contained uwsgi_socket_keepalive
|
||||||
syn keyword ngxDirective contained uwsgi_ssl_certificate
|
syn keyword ngxDirective contained uwsgi_ssl_certificate
|
||||||
syn keyword ngxDirective contained uwsgi_ssl_certificate_key
|
syn keyword ngxDirective contained uwsgi_ssl_certificate_key
|
||||||
syn keyword ngxDirective contained uwsgi_ssl_ciphers
|
syn keyword ngxDirective contained uwsgi_ssl_ciphers
|
||||||
@ -701,6 +718,26 @@ syn keyword ngxDirective contained xslt_string_param
|
|||||||
syn keyword ngxDirective contained xslt_stylesheet
|
syn keyword ngxDirective contained xslt_stylesheet
|
||||||
syn keyword ngxDirective contained xslt_types
|
syn keyword ngxDirective contained xslt_types
|
||||||
syn keyword ngxDirective contained zone
|
syn keyword ngxDirective contained zone
|
||||||
|
syn keyword ngxDirective contained zone_sync
|
||||||
|
syn keyword ngxDirective contained zone_sync_buffers
|
||||||
|
syn keyword ngxDirective contained zone_sync_connect_retry_interval
|
||||||
|
syn keyword ngxDirective contained zone_sync_connect_timeout
|
||||||
|
syn keyword ngxDirective contained zone_sync_interval
|
||||||
|
syn keyword ngxDirective contained zone_sync_recv_buffer_size
|
||||||
|
syn keyword ngxDirective contained zone_sync_server
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_certificate
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_certificate_key
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_ciphers
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_crl
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_name
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_password_file
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_protocols
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_server_name
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_trusted_certificate
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_verify
|
||||||
|
syn keyword ngxDirective contained zone_sync_ssl_verify_depth
|
||||||
|
syn keyword ngxDirective contained zone_sync_timeout
|
||||||
|
|
||||||
" 3rd party modules list taken from
|
" 3rd party modules list taken from
|
||||||
" https://github.com/freebsd/freebsd-ports/blob/master/www/nginx-devel/Makefile
|
" https://github.com/freebsd/freebsd-ports/blob/master/www/nginx-devel/Makefile
|
||||||
@ -876,6 +913,8 @@ syn keyword ngxDirectiveThirdParty contained more_set_input_headers
|
|||||||
|
|
||||||
" NGINX WebDAV missing commands support (PROPFIND & OPTIONS)
|
" NGINX WebDAV missing commands support (PROPFIND & OPTIONS)
|
||||||
" https://github.com/arut/nginx-dav-ext-module
|
" https://github.com/arut/nginx-dav-ext-module
|
||||||
|
syn keyword ngxDirectiveThirdParty contained dav_ext_lock
|
||||||
|
syn keyword ngxDirectiveThirdParty contained dav_ext_lock_zone
|
||||||
syn keyword ngxDirectiveThirdParty contained dav_ext_methods
|
syn keyword ngxDirectiveThirdParty contained dav_ext_methods
|
||||||
|
|
||||||
" ngx_eval
|
" ngx_eval
|
||||||
@ -895,6 +934,7 @@ syn keyword ngxDirectiveThirdParty contained fancyindex_directories_first
|
|||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_exact_size
|
syn keyword ngxDirectiveThirdParty contained fancyindex_exact_size
|
||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_footer
|
syn keyword ngxDirectiveThirdParty contained fancyindex_footer
|
||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_header
|
syn keyword ngxDirectiveThirdParty contained fancyindex_header
|
||||||
|
syn keyword ngxDirectiveThirdParty contained fancyindex_hide_parent_dir
|
||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_hide_symlinks
|
syn keyword ngxDirectiveThirdParty contained fancyindex_hide_symlinks
|
||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_ignore
|
syn keyword ngxDirectiveThirdParty contained fancyindex_ignore
|
||||||
syn keyword ngxDirectiveThirdParty contained fancyindex_localtime
|
syn keyword ngxDirectiveThirdParty contained fancyindex_localtime
|
||||||
@ -937,8 +977,17 @@ syn keyword ngxDirectiveThirdParty contained notice_type
|
|||||||
|
|
||||||
" nchan
|
" nchan
|
||||||
" https://github.com/slact/nchan
|
" https://github.com/slact/nchan
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_access_control_allow_credentials
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_access_control_allow_origin
|
syn keyword ngxDirectiveThirdParty contained nchan_access_control_allow_origin
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_authorize_request
|
syn keyword ngxDirectiveThirdParty contained nchan_authorize_request
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_channels
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_message_padding_bytes
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_messages_per_channel_per_minute
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_publisher_distribution
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_subscriber_distribution
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_subscribers_per_channel
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_benchmark_time
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_channel_event_string
|
syn keyword ngxDirectiveThirdParty contained nchan_channel_event_string
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_channel_events_channel_id
|
syn keyword ngxDirectiveThirdParty contained nchan_channel_events_channel_id
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_channel_group
|
syn keyword ngxDirectiveThirdParty contained nchan_channel_group
|
||||||
@ -974,15 +1023,19 @@ syn keyword ngxDirectiveThirdParty contained nchan_publisher_upstream_request
|
|||||||
syn keyword ngxDirectiveThirdParty contained nchan_pubsub
|
syn keyword ngxDirectiveThirdParty contained nchan_pubsub
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_pubsub_channel_id
|
syn keyword ngxDirectiveThirdParty contained nchan_pubsub_channel_id
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_pubsub_location
|
syn keyword ngxDirectiveThirdParty contained nchan_pubsub_location
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_connect_timeout
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_fakesub_timer_interval
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_fakesub_timer_interval
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_idle_channel_cache_timeout
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_idle_channel_cache_timeout
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_namespace
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_namespace
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_nostore_fastpublish
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_optimize_target
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_pass
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_pass
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_pass_inheritable
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_pass_inheritable
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_ping_interval
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_ping_interval
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_publish_msgpacked_max_size
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_publish_msgpacked_max_size
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_server
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_server
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_storage_mode
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_storage_mode
|
||||||
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_subscribe_weights
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_url
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_url
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_redis_wait_after_connecting
|
syn keyword ngxDirectiveThirdParty contained nchan_redis_wait_after_connecting
|
||||||
syn keyword ngxDirectiveThirdParty contained nchan_shared_memory_size
|
syn keyword ngxDirectiveThirdParty contained nchan_shared_memory_size
|
||||||
@ -1280,6 +1333,7 @@ syn keyword ngxDirectiveThirdParty contained lua_package_cpath
|
|||||||
syn keyword ngxDirectiveThirdParty contained lua_package_path
|
syn keyword ngxDirectiveThirdParty contained lua_package_path
|
||||||
syn keyword ngxDirectiveThirdParty contained lua_regex_cache_max_entries
|
syn keyword ngxDirectiveThirdParty contained lua_regex_cache_max_entries
|
||||||
syn keyword ngxDirectiveThirdParty contained lua_regex_match_limit
|
syn keyword ngxDirectiveThirdParty contained lua_regex_match_limit
|
||||||
|
syn keyword ngxDirectiveThirdParty contained lua_sa_restart
|
||||||
syn keyword ngxDirectiveThirdParty contained lua_shared_dict
|
syn keyword ngxDirectiveThirdParty contained lua_shared_dict
|
||||||
syn keyword ngxDirectiveThirdParty contained lua_socket_buffer_size
|
syn keyword ngxDirectiveThirdParty contained lua_socket_buffer_size
|
||||||
syn keyword ngxDirectiveThirdParty contained lua_socket_connect_timeout
|
syn keyword ngxDirectiveThirdParty contained lua_socket_connect_timeout
|
||||||
@ -1355,9 +1409,15 @@ syn keyword ngxDirectiveThirdParty contained rules_enabled
|
|||||||
" https://www.phusionpassenger.com/library/config/nginx/reference/
|
" https://www.phusionpassenger.com/library/config/nginx/reference/
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_abort_on_startup_error
|
syn keyword ngxDirectiveThirdParty contained passenger_abort_on_startup_error
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_abort_websockets_on_process_shutdown
|
syn keyword ngxDirectiveThirdParty contained passenger_abort_websockets_on_process_shutdown
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_admin_panel_auth_type
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_admin_panel_password
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_admin_panel_url
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_admin_panel_username
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_anonymous_telemetry_proxy
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_env
|
syn keyword ngxDirectiveThirdParty contained passenger_app_env
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_file_descriptor_ulimit
|
syn keyword ngxDirectiveThirdParty contained passenger_app_file_descriptor_ulimit
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_group_name
|
syn keyword ngxDirectiveThirdParty contained passenger_app_group_name
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_app_log_file
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_rights
|
syn keyword ngxDirectiveThirdParty contained passenger_app_rights
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_root
|
syn keyword ngxDirectiveThirdParty contained passenger_app_root
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_app_type
|
syn keyword ngxDirectiveThirdParty contained passenger_app_type
|
||||||
@ -1373,8 +1433,10 @@ syn keyword ngxDirectiveThirdParty contained passenger_data_buffer_dir
|
|||||||
syn keyword ngxDirectiveThirdParty contained passenger_debugger
|
syn keyword ngxDirectiveThirdParty contained passenger_debugger
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_default_group
|
syn keyword ngxDirectiveThirdParty contained passenger_default_group
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_default_user
|
syn keyword ngxDirectiveThirdParty contained passenger_default_user
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_disable_anonymous_telemetry
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_disable_security_update_check
|
syn keyword ngxDirectiveThirdParty contained passenger_disable_security_update_check
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_document_root
|
syn keyword ngxDirectiveThirdParty contained passenger_document_root
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_dump_config_manifest
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_enabled
|
syn keyword ngxDirectiveThirdParty contained passenger_enabled
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_env_var
|
syn keyword ngxDirectiveThirdParty contained passenger_env_var
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_file_descriptor_log_file
|
syn keyword ngxDirectiveThirdParty contained passenger_file_descriptor_log_file
|
||||||
@ -1402,6 +1464,7 @@ syn keyword ngxDirectiveThirdParty contained passenger_max_requests
|
|||||||
syn keyword ngxDirectiveThirdParty contained passenger_memory_limit
|
syn keyword ngxDirectiveThirdParty contained passenger_memory_limit
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_meteor_app_settings
|
syn keyword ngxDirectiveThirdParty contained passenger_meteor_app_settings
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_min_instances
|
syn keyword ngxDirectiveThirdParty contained passenger_min_instances
|
||||||
|
syn keyword ngxDirectiveThirdParty contained passenger_monitor_log_file
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_nodejs
|
syn keyword ngxDirectiveThirdParty contained passenger_nodejs
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_pass_header
|
syn keyword ngxDirectiveThirdParty contained passenger_pass_header
|
||||||
syn keyword ngxDirectiveThirdParty contained passenger_pool_idle_time
|
syn keyword ngxDirectiveThirdParty contained passenger_pool_idle_time
|
||||||
@ -1778,6 +1841,8 @@ syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter
|
|||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_by_host
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_by_host
|
||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_by_set_key
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_by_set_key
|
||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_check_duplicate
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_check_duplicate
|
||||||
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_filter_max_node
|
||||||
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_histogram_buckets
|
||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit
|
||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit_check_duplicate
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit_check_duplicate
|
||||||
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit_traffic
|
syn keyword ngxDirectiveThirdParty contained vhost_traffic_status_limit_traffic
|
||||||
@ -1899,11 +1964,11 @@ syn keyword ngxDirectiveThirdParty contained form_auth_remote_user
|
|||||||
|
|
||||||
" ngx_http_accounting_module
|
" ngx_http_accounting_module
|
||||||
" https://github.com/Lax/ngx_http_accounting_module
|
" https://github.com/Lax/ngx_http_accounting_module
|
||||||
syn keyword ngxDirectiveThirdParty contained http_accounting
|
syn keyword ngxDirectiveThirdParty contained accounting
|
||||||
syn keyword ngxDirectiveThirdParty contained http_accounting_id
|
syn keyword ngxDirectiveThirdParty contained accounting_id
|
||||||
syn keyword ngxDirectiveThirdParty contained http_accounting_interval
|
syn keyword ngxDirectiveThirdParty contained accounting_interval
|
||||||
syn keyword ngxDirectiveThirdParty contained http_accounting_log
|
syn keyword ngxDirectiveThirdParty contained accounting_log
|
||||||
syn keyword ngxDirectiveThirdParty contained http_accounting_perturb
|
syn keyword ngxDirectiveThirdParty contained accounting_perturb
|
||||||
|
|
||||||
" concatenating files in a given context: CSS and JS files usually
|
" concatenating files in a given context: CSS and JS files usually
|
||||||
" https://github.com/alibaba/nginx-http-concat
|
" https://github.com/alibaba/nginx-http-concat
|
||||||
|
260
docs/CHANGES
260
docs/CHANGES
@ -1,7 +1,263 @@
|
|||||||
|
|
||||||
Changes with nginx 1.14.0 17 Apr 2018
|
Changes with nginx 1.16.1 13 Aug 2019
|
||||||
|
|
||||||
*) 1.14.x stable branch.
|
*) Security: when using HTTP/2 a client might cause excessive memory
|
||||||
|
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
|
||||||
|
CVE-2019-9516).
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.16.0 23 Apr 2019
|
||||||
|
|
||||||
|
*) 1.16.x stable branch.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.12 16 Apr 2019
|
||||||
|
|
||||||
|
*) Bugfix: a segmentation fault might occur in a worker process if
|
||||||
|
variables were used in the "ssl_certificate" or "ssl_certificate_key"
|
||||||
|
directives and OCSP stapling was enabled.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.11 09 Apr 2019
|
||||||
|
|
||||||
|
*) Bugfix: in the "ssl_stapling_file" directive on Windows.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.10 26 Mar 2019
|
||||||
|
|
||||||
|
*) Change: when using a hostname in the "listen" directive nginx now
|
||||||
|
creates listening sockets for all addresses the hostname resolves to
|
||||||
|
(previously, only the first address was used).
|
||||||
|
|
||||||
|
*) Feature: port ranges in the "listen" directive.
|
||||||
|
|
||||||
|
*) Feature: loading of SSL certificates and secret keys from variables.
|
||||||
|
|
||||||
|
*) Workaround: the $ssl_server_name variable might be empty when using
|
||||||
|
OpenSSL 1.1.1.
|
||||||
|
|
||||||
|
*) Bugfix: nginx/Windows could not be built with Visual Studio 2015 or
|
||||||
|
newer; the bug had appeared in 1.15.9.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.9 26 Feb 2019
|
||||||
|
|
||||||
|
*) Feature: variables support in the "ssl_certificate" and
|
||||||
|
"ssl_certificate_key" directives.
|
||||||
|
|
||||||
|
*) Feature: the "poll" method is now available on Windows when using
|
||||||
|
Windows Vista or newer.
|
||||||
|
|
||||||
|
*) Bugfix: if the "select" method was used on Windows and an error
|
||||||
|
occurred while establishing a backend connection, nginx waited for
|
||||||
|
the connection establishment timeout to expire.
|
||||||
|
|
||||||
|
*) Bugfix: the "proxy_upload_rate" and "proxy_download_rate" directives
|
||||||
|
in the stream module worked incorrectly when proxying UDP datagrams.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.8 25 Dec 2018
|
||||||
|
|
||||||
|
*) Feature: the $upstream_bytes_sent variable.
|
||||||
|
Thanks to Piotr Sikora.
|
||||||
|
|
||||||
|
*) Feature: new directives in vim syntax highlighting scripts.
|
||||||
|
Thanks to Gena Makhomed.
|
||||||
|
|
||||||
|
*) Bugfix: in the "proxy_cache_background_update" directive.
|
||||||
|
|
||||||
|
*) Bugfix: in the "geo" directive when using unix domain listen sockets.
|
||||||
|
|
||||||
|
*) Workaround: the "ignoring stale global SSL error ... bad length"
|
||||||
|
alerts might appear in logs when using the "ssl_early_data" directive
|
||||||
|
with OpenSSL.
|
||||||
|
|
||||||
|
*) Bugfix: in nginx/Windows.
|
||||||
|
|
||||||
|
*) Bugfix: in the ngx_http_autoindex_module on 32-bit platforms.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.7 27 Nov 2018
|
||||||
|
|
||||||
|
*) Feature: the "proxy_requests" directive in the stream module.
|
||||||
|
|
||||||
|
*) Feature: the "delay" parameter of the "limit_req" directive.
|
||||||
|
Thanks to Vladislav Shabanov and Peter Shchuchkin.
|
||||||
|
|
||||||
|
*) Bugfix: memory leak on errors during reconfiguration.
|
||||||
|
|
||||||
|
*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
|
||||||
|
$upstream_header_time variables.
|
||||||
|
|
||||||
|
*) Bugfix: a segmentation fault might occur in a worker process if the
|
||||||
|
ngx_http_mp4_module was used on 32-bit platforms.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.6 06 Nov 2018
|
||||||
|
|
||||||
|
*) Security: when using HTTP/2 a client might cause excessive memory
|
||||||
|
consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).
|
||||||
|
|
||||||
|
*) Security: processing of a specially crafted mp4 file with the
|
||||||
|
ngx_http_mp4_module might result in worker process memory disclosure
|
||||||
|
(CVE-2018-16845).
|
||||||
|
|
||||||
|
*) Feature: the "proxy_socket_keepalive", "fastcgi_socket_keepalive",
|
||||||
|
"grpc_socket_keepalive", "memcached_socket_keepalive",
|
||||||
|
"scgi_socket_keepalive", and "uwsgi_socket_keepalive" directives.
|
||||||
|
|
||||||
|
*) Bugfix: if nginx was built with OpenSSL 1.1.0 and used with OpenSSL
|
||||||
|
1.1.1, the TLS 1.3 protocol was always enabled.
|
||||||
|
|
||||||
|
*) Bugfix: working with gRPC backends might result in excessive memory
|
||||||
|
consumption.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.5 02 Oct 2018
|
||||||
|
|
||||||
|
*) Bugfix: a segmentation fault might occur in a worker process when
|
||||||
|
using OpenSSL 1.1.0h or newer; the bug had appeared in 1.15.4.
|
||||||
|
|
||||||
|
*) Bugfix: of minor potential bugs.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.4 25 Sep 2018
|
||||||
|
|
||||||
|
*) Feature: now the "ssl_early_data" directive can be used with OpenSSL.
|
||||||
|
|
||||||
|
*) Bugfix: in the ngx_http_uwsgi_module.
|
||||||
|
Thanks to Chris Caputo.
|
||||||
|
|
||||||
|
*) Bugfix: connections with some gRPC backends might not be cached when
|
||||||
|
using the "keepalive" directive.
|
||||||
|
|
||||||
|
*) Bugfix: a socket leak might occur when using the "error_page"
|
||||||
|
directive to redirect early request processing errors, notably errors
|
||||||
|
with code 400.
|
||||||
|
|
||||||
|
*) Bugfix: the "return" directive did not change the response code when
|
||||||
|
returning errors if the request was redirected by the "error_page"
|
||||||
|
directive.
|
||||||
|
|
||||||
|
*) Bugfix: standard error pages and responses of the
|
||||||
|
ngx_http_autoindex_module module used the "bgcolor" attribute, and
|
||||||
|
might be displayed incorrectly when using custom color settings in
|
||||||
|
browsers.
|
||||||
|
Thanks to Nova DasSarma.
|
||||||
|
|
||||||
|
*) Change: the logging level of the "no suitable key share" and "no
|
||||||
|
suitable signature algorithm" SSL errors has been lowered from "crit"
|
||||||
|
to "info".
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.3 28 Aug 2018
|
||||||
|
|
||||||
|
*) Feature: now TLSv1.3 can be used with BoringSSL.
|
||||||
|
|
||||||
|
*) Feature: the "ssl_early_data" directive, currently available with
|
||||||
|
BoringSSL.
|
||||||
|
|
||||||
|
*) Feature: the "keepalive_timeout" and "keepalive_requests" directives
|
||||||
|
in the "upstream" block.
|
||||||
|
|
||||||
|
*) Bugfix: the ngx_http_dav_module did not truncate destination file
|
||||||
|
when copying a file over an existing one with the COPY method.
|
||||||
|
|
||||||
|
*) Bugfix: the ngx_http_dav_module used zero access rights on the
|
||||||
|
destination file and did not preserve file modification time when
|
||||||
|
moving a file between different file systems with the MOVE method.
|
||||||
|
|
||||||
|
*) Bugfix: the ngx_http_dav_module used default access rights when
|
||||||
|
copying a file with the COPY method.
|
||||||
|
|
||||||
|
*) Workaround: some clients might not work when using HTTP/2; the bug
|
||||||
|
had appeared in 1.13.5.
|
||||||
|
|
||||||
|
*) Bugfix: nginx could not be built with LibreSSL 2.8.0.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.2 24 Jul 2018
|
||||||
|
|
||||||
|
*) Feature: the $ssl_preread_protocol variable in the
|
||||||
|
ngx_stream_ssl_preread_module.
|
||||||
|
|
||||||
|
*) Feature: now when using the "reset_timedout_connection" directive
|
||||||
|
nginx will reset connections being closed with the 444 code.
|
||||||
|
|
||||||
|
*) Change: a logging level of the "http request", "https proxy request",
|
||||||
|
"unsupported protocol", and "version too low" SSL errors has been
|
||||||
|
lowered from "crit" to "info".
|
||||||
|
|
||||||
|
*) Bugfix: DNS requests were not resent if initial sending of a request
|
||||||
|
failed.
|
||||||
|
|
||||||
|
*) Bugfix: the "reuseport" parameter of the "listen" directive was
|
||||||
|
ignored if the number of worker processes was specified after the
|
||||||
|
"listen" directive.
|
||||||
|
|
||||||
|
*) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to
|
||||||
|
switch off "ssl_prefer_server_ciphers" in a virtual server if it was
|
||||||
|
switched on in the default server.
|
||||||
|
|
||||||
|
*) Bugfix: SSL session reuse with upstream servers did not work with the
|
||||||
|
TLS 1.3 protocol.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.1 03 Jul 2018
|
||||||
|
|
||||||
|
*) Feature: the "random" directive inside the "upstream" block.
|
||||||
|
|
||||||
|
*) Feature: improved performance when using the "hash" and "ip_hash"
|
||||||
|
directives with the "zone" directive.
|
||||||
|
|
||||||
|
*) Feature: the "reuseport" parameter of the "listen" directive now uses
|
||||||
|
SO_REUSEPORT_LB on FreeBSD 12.
|
||||||
|
|
||||||
|
*) Bugfix: HTTP/2 server push did not work if SSL was terminated by a
|
||||||
|
proxy server in front of nginx.
|
||||||
|
|
||||||
|
*) Bugfix: the "tcp_nopush" directive was always used on backend
|
||||||
|
connections.
|
||||||
|
|
||||||
|
*) Bugfix: sending a disk-buffered request body to a gRPC backend might
|
||||||
|
fail.
|
||||||
|
|
||||||
|
|
||||||
|
Changes with nginx 1.15.0 05 Jun 2018
|
||||||
|
|
||||||
|
*) Change: the "ssl" directive is deprecated; the "ssl" parameter of the
|
||||||
|
"listen" directive should be used instead.
|
||||||
|
|
||||||
|
*) Change: now nginx detects missing SSL certificates during
|
||||||
|
configuration testing when using the "ssl" parameter of the "listen"
|
||||||
|
directive.
|
||||||
|
|
||||||
|
*) Feature: now the stream module can handle multiple incoming UDP
|
||||||
|
datagrams from a client within a single session.
|
||||||
|
|
||||||
|
*) Bugfix: it was possible to specify an incorrect response code in the
|
||||||
|
"proxy_cache_valid" directive.
|
||||||
|
|
||||||
|
*) Bugfix: nginx could not be built by gcc 8.1.
|
||||||
|
|
||||||
|
*) Bugfix: logging to syslog stopped on local IP address changes.
|
||||||
|
|
||||||
|
*) Bugfix: nginx could not be built by clang with CUDA SDK installed;
|
||||||
|
the bug had appeared in 1.13.8.
|
||||||
|
|
||||||
|
*) Bugfix: "getsockopt(TCP_FASTOPEN) ... failed" messages might appear
|
||||||
|
in logs during binary upgrade when using unix domain listen sockets
|
||||||
|
on FreeBSD.
|
||||||
|
|
||||||
|
*) Bugfix: nginx could not be built on Fedora 28 Linux.
|
||||||
|
|
||||||
|
*) Bugfix: request processing rate might exceed configured rate when
|
||||||
|
using the "limit_req" directive.
|
||||||
|
|
||||||
|
*) Bugfix: in handling of client addresses when using unix domain listen
|
||||||
|
sockets to work with datagrams on Linux.
|
||||||
|
|
||||||
|
*) Bugfix: in memory allocation error handling.
|
||||||
|
|
||||||
|
|
||||||
Changes with nginx 1.13.12 10 Apr 2018
|
Changes with nginx 1.13.12 10 Apr 2018
|
||||||
|
268
docs/CHANGES.ru
268
docs/CHANGES.ru
@ -1,7 +1,271 @@
|
|||||||
|
|
||||||
Изменения в nginx 1.14.0 17.04.2018
|
Изменения в nginx 1.16.1 13.08.2019
|
||||||
|
|
||||||
*) Стабильная ветка 1.14.x.
|
*) Безопасность: при использовании HTTP/2 клиент мог вызвать чрезмерное
|
||||||
|
потребление памяти и ресурсов процессора (CVE-2019-9511,
|
||||||
|
CVE-2019-9513, CVE-2019-9516).
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.16.0 23.04.2019
|
||||||
|
|
||||||
|
*) Стабильная ветка 1.16.x.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.12 16.04.2019
|
||||||
|
|
||||||
|
*) Исправление: в рабочем процессе мог произойти segmentation fault,
|
||||||
|
если в директивах ssl_certificate или ssl_certificate_key
|
||||||
|
использовались переменные и был включён OCSP stapling.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.11 09.04.2019
|
||||||
|
|
||||||
|
*) Исправление: в директиве ssl_stapling_file на Windows.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.10 26.03.2019
|
||||||
|
|
||||||
|
*) Изменение: теперь при использовании имени хоста в директиве listen
|
||||||
|
nginx создаёт listen-сокеты для всех адресов, соответствующих этому
|
||||||
|
имени (ранее использовался только первый адрес).
|
||||||
|
|
||||||
|
*) Добавление: диапазоны портов в директиве listen.
|
||||||
|
|
||||||
|
*) Добавление: возможность загрузки SSL-сертификатов и секретных ключей
|
||||||
|
из переменных.
|
||||||
|
|
||||||
|
*) Изменение: переменная $ssl_server_name могла быть пустой при
|
||||||
|
использовании OpenSSL 1.1.1.
|
||||||
|
|
||||||
|
*) Исправление: nginx/Windows не собирался с Visual Studio 2015 и новее;
|
||||||
|
ошибка появилась в 1.15.9.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.9 26.02.2019
|
||||||
|
|
||||||
|
*) Добавление: директивы ssl_certificate и ssl_certificate_key
|
||||||
|
поддерживают переменные.
|
||||||
|
|
||||||
|
*) Добавление: метод poll теперь доступен на Windows при использовании
|
||||||
|
Windows Vista и новее.
|
||||||
|
|
||||||
|
*) Исправление: если при использовании метода select на Windows
|
||||||
|
происходила ошибка при установлении соединения с бэкендом, nginx
|
||||||
|
ожидал истечения таймаута на установление соединения.
|
||||||
|
|
||||||
|
*) Исправление: директивы proxy_upload_rate и proxy_download_rate в
|
||||||
|
модуле stream работали некорректно при проксировании UDP-пакетов.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.8 25.12.2018
|
||||||
|
|
||||||
|
*) Добавление: переменная $upstream_bytes_sent.
|
||||||
|
Спасибо Piotr Sikora.
|
||||||
|
|
||||||
|
*) Добавление: новые директивы в скриптах подсветки синтаксиса для vim.
|
||||||
|
Спасибо Геннадию Махомеду.
|
||||||
|
|
||||||
|
*) Исправление: в директиве proxy_cache_background_update.
|
||||||
|
|
||||||
|
*) Исправление: в директиве geo при использовании unix domain
|
||||||
|
listen-сокетов.
|
||||||
|
|
||||||
|
*) Изменение: при использовании директивы ssl_early_data с OpenSSL в
|
||||||
|
логах могли появляться сообщения "ignoring stale global SSL error ...
|
||||||
|
bad length".
|
||||||
|
|
||||||
|
*) Исправление: в nginx/Windows.
|
||||||
|
|
||||||
|
*) Исправление: в модуле ngx_http_autoindex_module на 32-битных
|
||||||
|
платформах.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.7 27.11.2018
|
||||||
|
|
||||||
|
*) Добавление: директива proxy_requests в модуле stream.
|
||||||
|
|
||||||
|
*) Добавление: параметр "delay" директивы "limit_req".
|
||||||
|
Спасибо Владиславу Шабанову и Петру Щучкину.
|
||||||
|
|
||||||
|
*) Исправление: утечки памяти в случае ошибок при переконфигурации.
|
||||||
|
|
||||||
|
*) Исправление: в переменных $upstream_response_time,
|
||||||
|
$upstream_connect_time и $upstream_header_time.
|
||||||
|
|
||||||
|
*) Исправление: в рабочем процессе мог произойти segmentation fault,
|
||||||
|
если использовался модуль ngx_http_mp4_module на 32-битных
|
||||||
|
платформах.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.6 06.11.2018
|
||||||
|
|
||||||
|
*) Безопасность: при использовании HTTP/2 клиент мог вызвать чрезмерное
|
||||||
|
потреблению памяти (CVE-2018-16843) и ресурсов процессора
|
||||||
|
(CVE-2018-16844).
|
||||||
|
|
||||||
|
*) Безопасность: при обработке специально созданного mp4-файла модулем
|
||||||
|
ngx_http_mp4_module содержимое памяти рабочего процесса могло быть
|
||||||
|
отправлено клиенту (CVE-2018-16845).
|
||||||
|
|
||||||
|
*) Добавление: директивы proxy_socket_keepalive,
|
||||||
|
fastcgi_socket_keepalive, grpc_socket_keepalive,
|
||||||
|
memcached_socket_keepalive, scgi_socket_keepalive и
|
||||||
|
uwsgi_socket_keepalive.
|
||||||
|
|
||||||
|
*) Исправление: если nginx был собран с OpenSSL 1.1.0, а использовался с
|
||||||
|
OpenSSL 1.1.1, протокол TLS 1.3 всегда был разрешён.
|
||||||
|
|
||||||
|
*) Исправление: при работе с gRPC-бэкендами могло расходоваться большое
|
||||||
|
количество памяти.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.5 02.10.2018
|
||||||
|
|
||||||
|
*) Исправление: при использовании OpenSSL 1.1.0h и новее в рабочем
|
||||||
|
процессе мог произойти segmentation fault; ошибка появилась в 1.15.4.
|
||||||
|
|
||||||
|
*) Исправление: незначительных потенциальных ошибок.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.4 25.09.2018
|
||||||
|
|
||||||
|
*) Добавление: теперь директиву ssl_early_data можно использовать с
|
||||||
|
OpenSSL.
|
||||||
|
|
||||||
|
*) Исправление: в модуле ngx_http_uwsgi_module.
|
||||||
|
Спасибо Chris Caputo.
|
||||||
|
|
||||||
|
*) Исправление: соединения к некоторым gRPC-бэкендам могли не
|
||||||
|
кэшироваться при использовании директивы keepalive.
|
||||||
|
|
||||||
|
*) Исправление: при использовании директивы error_page для
|
||||||
|
перенаправления ошибок, возникающих на ранних этапах обработки
|
||||||
|
запроса, в частности ошибок с кодом 400, могла происходить утечка
|
||||||
|
сокетов.
|
||||||
|
|
||||||
|
*) Исправление: директива return при возврате ошибок не изменяла код
|
||||||
|
ответа, если запрос был перенаправлен с помощью директивы error_page.
|
||||||
|
|
||||||
|
*) Исправление: стандартные сообщения об ошибках и ответы модуля
|
||||||
|
ngx_http_autoindex_module содержали атрибут bgcolor, что могло
|
||||||
|
приводить к их некорректному отображению при использовании
|
||||||
|
пользовательских настроек цветов в браузерах.
|
||||||
|
Спасибо Nova DasSarma.
|
||||||
|
|
||||||
|
*) Изменение: уровень логгирования ошибок SSL "no suitable key share" и
|
||||||
|
"no suitable signature algorithm" понижен с уровня crit до info.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.3 28.08.2018
|
||||||
|
|
||||||
|
*) Добавление: теперь TLSv1.3 можно использовать с BoringSSL.
|
||||||
|
|
||||||
|
*) Добавление: директива ssl_early_data, сейчас доступна при
|
||||||
|
использовании BoringSSL.
|
||||||
|
|
||||||
|
*) Добавление: директивы keepalive_timeout и keepalive_requests в блоке
|
||||||
|
upstream.
|
||||||
|
|
||||||
|
*) Исправление: модуль ngx_http_dav_module при копировании файла поверх
|
||||||
|
существующего файла с помощью метода COPY не обнулял целевой файл.
|
||||||
|
|
||||||
|
*) Исправление: модуль ngx_http_dav_module при перемещении файла между
|
||||||
|
файловыми системами с помощью метода MOVE устанавливал нулевые права
|
||||||
|
доступа на результирующий файл и не сохранял время изменения файла.
|
||||||
|
|
||||||
|
*) Исправление: модуль ngx_http_dav_module при копировании файла с
|
||||||
|
помощью метода COPY для результирующего файла использовал права
|
||||||
|
доступа по умолчанию.
|
||||||
|
|
||||||
|
*) Изменение: некоторые клиенты могли не работать при использовании
|
||||||
|
HTTP/2; ошибка появилась в 1.13.5.
|
||||||
|
|
||||||
|
*) Исправление: nginx не собирался с LibreSSL 2.8.0.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.2 24.07.2018
|
||||||
|
|
||||||
|
*) Добавление: переменная $ssl_preread_protocol в модуле
|
||||||
|
ngx_stream_ssl_preread_module.
|
||||||
|
|
||||||
|
*) Добавление: теперь при использовании директивы
|
||||||
|
reset_timedout_connection nginx сбрасывает соединения, закрываемые с
|
||||||
|
кодом 444.
|
||||||
|
|
||||||
|
*) Изменение: уровень логгирования ошибок SSL "http request", "https
|
||||||
|
proxy request", "unsupported protocol" и "version too low" понижен с
|
||||||
|
уровня crit до info.
|
||||||
|
|
||||||
|
*) Исправление: запросы к DNS-серверу не отправлялись повторно, если при
|
||||||
|
первой попытке отправки происходила ошибка.
|
||||||
|
|
||||||
|
*) Исправление: параметр reuseport директивы listen игнорировался, если
|
||||||
|
количество рабочих процессов было задано после директивы listen.
|
||||||
|
|
||||||
|
*) Исправление: при использовании OpenSSL 1.1.0 и новее директиву
|
||||||
|
ssl_prefer_server_ciphers нельзя было выключить в виртуальном
|
||||||
|
сервере, если она была включена в сервере по умолчанию.
|
||||||
|
|
||||||
|
*) Исправление: повторное использование SSL-сессий к бэкендам не
|
||||||
|
работало с протоколом TLS 1.3.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.1 03.07.2018
|
||||||
|
|
||||||
|
*) Добавление: директива random в блоке upstream.
|
||||||
|
|
||||||
|
*) Добавление: улучшена производительность при использовании директив
|
||||||
|
hash и ip_hash совместно с директивой zone.
|
||||||
|
|
||||||
|
*) Добавление: параметр reuseport директивы listen теперь использует
|
||||||
|
SO_REUSEPORT_LB на FreeBSD 12.
|
||||||
|
|
||||||
|
*) Исправление: HTTP/2 server push не работал, если SSL терминировался
|
||||||
|
прокси-сервером перед nginx'ом.
|
||||||
|
|
||||||
|
*) Исправление: директива tcp_nopush всегда использовалась для
|
||||||
|
соединений к бэкендам.
|
||||||
|
|
||||||
|
*) Исправление: при отправке сохранённого на диск тела запроса на
|
||||||
|
gRPC-бэкенд могли возникать ошибки.
|
||||||
|
|
||||||
|
|
||||||
|
Изменения в nginx 1.15.0 05.06.2018
|
||||||
|
|
||||||
|
*) Изменение: директива "ssl" теперь считается устаревшей; вместо неё
|
||||||
|
следует использовать параметр ssl директивы listen.
|
||||||
|
|
||||||
|
*) Изменение: теперь при использовании директивы listen с параметром ssl
|
||||||
|
nginx определяет отсутствие SSL-сертификатов при тестировании
|
||||||
|
конфигурации.
|
||||||
|
|
||||||
|
*) Добавление: теперь модуль stream умеет обрабатывать несколько
|
||||||
|
входящих UDP-пакетов от клиента в рамках одной сессии.
|
||||||
|
|
||||||
|
*) Исправление: в директиве proxy_cache_valid можно было указать
|
||||||
|
некорректный код ответа.
|
||||||
|
|
||||||
|
*) Исправление: nginx не собирался gcc 8.1.
|
||||||
|
|
||||||
|
*) Исправление: логгирование в syslog останавливалось при изменении
|
||||||
|
локального IP-адреса.
|
||||||
|
|
||||||
|
*) Исправление: nginx не собирался компилятором clang, если был
|
||||||
|
установлен CUDA SDK; ошибка появилась в 1.13.8.
|
||||||
|
|
||||||
|
*) Исправление: при использовании unix domain listen-сокетов на FreeBSD
|
||||||
|
в процессе обновления исполняемого файла в логе могли появляться
|
||||||
|
сообщения "getsockopt(TCP_FASTOPEN) ... failed".
|
||||||
|
|
||||||
|
*) Исправление: nginx не собирался на Fedora 28 Linux.
|
||||||
|
|
||||||
|
*) Исправление: при использовании директивы limit_req заданная скорость
|
||||||
|
обработки запросов могла не соблюдаться.
|
||||||
|
|
||||||
|
*) Исправление: в обработке адресов клиентов при использовании unix
|
||||||
|
domain listen-сокетов для работы с датаграммами на Linux.
|
||||||
|
|
||||||
|
*) Исправление: в обработке ошибок выделения памяти.
|
||||||
|
|
||||||
|
|
||||||
Изменения в nginx 1.13.12 10.04.2018
|
Изменения в nginx 1.13.12 10.04.2018
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
/*
|
/*
|
||||||
* Copyright (C) 2002-2018 Igor Sysoev
|
* Copyright (C) 2002-2019 Igor Sysoev
|
||||||
* Copyright (C) 2011-2018 Nginx, Inc.
|
* Copyright (C) 2011-2019 Nginx, Inc.
|
||||||
* All rights reserved.
|
* All rights reserved.
|
||||||
*
|
*
|
||||||
* Redistribution and use in source and binary forms, with or without
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
@ -4,15 +4,13 @@
|
|||||||
|
|
||||||
The OpenSSL toolkit stays under a double license, i.e. both the conditions of
|
The OpenSSL toolkit stays under a double license, i.e. both the conditions of
|
||||||
the OpenSSL License and the original SSLeay license apply to the toolkit.
|
the OpenSSL License and the original SSLeay license apply to the toolkit.
|
||||||
See below for the actual license texts. Actually both licenses are BSD-style
|
See below for the actual license texts.
|
||||||
Open Source licenses. In case of any license issues related to OpenSSL
|
|
||||||
please contact openssl-core@openssl.org.
|
|
||||||
|
|
||||||
OpenSSL License
|
OpenSSL License
|
||||||
---------------
|
---------------
|
||||||
|
|
||||||
/* ====================================================================
|
/* ====================================================================
|
||||||
* Copyright (c) 1998-2018 The OpenSSL Project. All rights reserved.
|
* Copyright (c) 1998-2019 The OpenSSL Project. All rights reserved.
|
||||||
*
|
*
|
||||||
* Redistribution and use in source and binary forms, with or without
|
* Redistribution and use in source and binary forms, with or without
|
||||||
* modification, are permitted provided that the following conditions
|
* modification, are permitted provided that the following conditions
|
||||||
|
@ -25,7 +25,7 @@ Email domain: cam.ac.uk
|
|||||||
University of Cambridge Computing Service,
|
University of Cambridge Computing Service,
|
||||||
Cambridge, England.
|
Cambridge, England.
|
||||||
|
|
||||||
Copyright (c) 1997-2018 University of Cambridge
|
Copyright (c) 1997-2019 University of Cambridge
|
||||||
All rights reserved.
|
All rights reserved.
|
||||||
|
|
||||||
|
|
||||||
@ -34,9 +34,9 @@ PCRE JUST-IN-TIME COMPILATION SUPPORT
|
|||||||
|
|
||||||
Written by: Zoltan Herczeg
|
Written by: Zoltan Herczeg
|
||||||
Email local part: hzmester
|
Email local part: hzmester
|
||||||
Emain domain: freemail.hu
|
Email domain: freemail.hu
|
||||||
|
|
||||||
Copyright(c) 2010-2018 Zoltan Herczeg
|
Copyright(c) 2010-2019 Zoltan Herczeg
|
||||||
All rights reserved.
|
All rights reserved.
|
||||||
|
|
||||||
|
|
||||||
@ -45,9 +45,9 @@ STACK-LESS JUST-IN-TIME COMPILER
|
|||||||
|
|
||||||
Written by: Zoltan Herczeg
|
Written by: Zoltan Herczeg
|
||||||
Email local part: hzmester
|
Email local part: hzmester
|
||||||
Emain domain: freemail.hu
|
Email domain: freemail.hu
|
||||||
|
|
||||||
Copyright(c) 2009-2018 Zoltan Herczeg
|
Copyright(c) 2009-2019 Zoltan Herczeg
|
||||||
All rights reserved.
|
All rights reserved.
|
||||||
|
|
||||||
|
|
||||||
|
128
hosts
128
hosts
@ -1,3 +1,8 @@
|
|||||||
|
#UTF-8 encoded
|
||||||
|
#www.google.com域名仅用于登陆验证
|
||||||
|
#如果你不需要这个功能,请把下一行删掉
|
||||||
|
127.0.0.1 www.google.com
|
||||||
|
|
||||||
#Pixiv Start
|
#Pixiv Start
|
||||||
127.0.0.1 pixiv.net
|
127.0.0.1 pixiv.net
|
||||||
127.0.0.1 www.pixiv.net
|
127.0.0.1 www.pixiv.net
|
||||||
@ -15,28 +20,111 @@
|
|||||||
127.0.0.1 imgaz.pixiv.net
|
127.0.0.1 imgaz.pixiv.net
|
||||||
127.0.0.1 sensei.pixiv.net
|
127.0.0.1 sensei.pixiv.net
|
||||||
127.0.0.1 fanbox.pixiv.net
|
127.0.0.1 fanbox.pixiv.net
|
||||||
|
127.0.0.1 source.pixiv.net
|
||||||
|
127.0.0.1 i1.pixiv.net
|
||||||
|
127.0.0.1 i2.pixiv.net
|
||||||
|
127.0.0.1 i3.pixiv.net
|
||||||
|
127.0.0.1 i4.pixiv.net
|
||||||
|
127.0.0.1 hls1.pixivsketch.net
|
||||||
|
127.0.0.1 hls2.pixivsketch.net
|
||||||
|
127.0.0.1 hls3.pixivsketch.net
|
||||||
|
127.0.0.1 hls4.pixivsketch.net
|
||||||
|
127.0.0.1 hls5.pixivsketch.net
|
||||||
|
127.0.0.1 hls6.pixivsketch.net
|
||||||
|
127.0.0.1 hls7.pixivsketch.net
|
||||||
|
127.0.0.1 hls8.pixivsketch.net
|
||||||
|
127.0.0.1 hls9.pixivsketch.net
|
||||||
|
127.0.0.1 hls10.pixivsketch.net
|
||||||
|
127.0.0.1 hls11.pixivsketch.net
|
||||||
|
127.0.0.1 hls12.pixivsketch.net
|
||||||
|
127.0.0.1 hls13.pixivsketch.net
|
||||||
|
127.0.0.1 hls14.pixivsketch.net
|
||||||
|
127.0.0.1 hls15.pixivsketch.net
|
||||||
|
127.0.0.1 hls16.pixivsketch.net
|
||||||
|
127.0.0.1 hls17.pixivsketch.net
|
||||||
|
127.0.0.1 hls18.pixivsketch.net
|
||||||
|
127.0.0.1 hls19.pixivsketch.net
|
||||||
|
127.0.0.1 hls20.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa1.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa2.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa3.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa4.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa5.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa6.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa7.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa8.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa10.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa11.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa12.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa13.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa14.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa15.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa16.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa17.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa18.pixivsketch.net
|
||||||
|
127.0.0.1 hlsa19.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc1.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc2.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc3.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc4.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc5.pixivsketch.net
|
||||||
|
127.0.0.1 hlsc6.pixivsketch.net
|
||||||
|
127.0.0.1 hlse1.pixivsketch.net
|
||||||
|
127.0.0.1 hlse2.pixivsketch.net
|
||||||
|
127.0.0.1 hlse3.pixivsketch.net
|
||||||
|
127.0.0.1 hlse4.pixivsketch.net
|
||||||
|
127.0.0.1 hlse5.pixivsketch.net
|
||||||
|
127.0.0.1 hlse6.pixivsketch.net
|
||||||
|
127.0.0.1 hlse7.pixivsketch.net
|
||||||
|
127.0.0.1 hlse8.pixivsketch.net
|
||||||
|
127.0.0.1 hlse9.pixivsketch.net
|
||||||
|
127.0.0.1 hlst1.pixivsketch.net
|
||||||
127.0.0.1 i.pximg.net
|
127.0.0.1 i.pximg.net
|
||||||
210.140.131.145 source.pixiv.net
|
127.0.0.1 app-api.pixiv.net
|
||||||
210.129.120.50 app-api.pixiv.net
|
13.226.113.16 g-client-proxy.pixiv.net
|
||||||
74.120.148.207 g-client-proxy.pixiv.net
|
210.140.131.157 d.pixiv.org
|
||||||
210.140.131.145 i1.pixiv.net
|
210.140.92.141 pixiv.pximg.net
|
||||||
210.140.131.145 i2.pixiv.net
|
210.140.92.142 s.pximg.net
|
||||||
210.140.131.145 i3.pixiv.net
|
210.140.131.246 api.booth.pm
|
||||||
210.140.131.145 i4.pixiv.net
|
210.140.131.220 myaccount.pixiv.net
|
||||||
210.140.131.159 d.pixiv.org
|
|
||||||
210.140.92.135 pixiv.pximg.net
|
|
||||||
210.140.92.134 s.pximg.net
|
|
||||||
#Pixiv End
|
#Pixiv End
|
||||||
|
|
||||||
# 顺手修一下维基百科
|
# 顺手修一下维基百科
|
||||||
# Wikipedia Start
|
# Wikipedia Start
|
||||||
127.0.0.1 zh.wikipedia.org #中文维基百科桌面版
|
127.0.0.1 en.wikipedia.org
|
||||||
127.0.0.1 zh-yue.wikipedia.org #粤文维基百科桌面版
|
127.0.0.1 zh.wikipedia.org #中文维基百科桌面版
|
||||||
127.0.0.1 wuu.wikipedia.org #吴语维基百科桌面版
|
127.0.0.1 en.m.wikipedia.org
|
||||||
127.0.0.1 ug.wikipedia.org #维吾尔文维基百科桌面版
|
127.0.0.1 zh.m.wikipedia.org
|
||||||
127.0.0.1 ja.wikipedia.org #日文维基百科桌面版
|
127.0.0.1 zh-yue.wikipedia.org #粤文维基百科桌面版
|
||||||
127.0.0.1 zh.wikinews.org #中文维基新闻桌面版
|
127.0.0.1 wuu.wikipedia.org #吴语维基百科桌面版
|
||||||
127.0.0.1 zh.m.wikipedia.org #中文维基百科移动版
|
127.0.0.1 ug.wikipedia.org #维吾尔文维基百科桌面版
|
||||||
127.0.0.1 ug.m.wikipedia.org #维吾尔文维基百科移动版
|
127.0.0.1 ja.wikipedia.org #日文维基百科桌面版
|
||||||
127.0.0.1 zh.m.wikinews.org #中文维基新闻移动版
|
127.0.0.1 zh.wikinews.org #中文维基新闻桌面版
|
||||||
# Wikipedia End
|
# Wikipedia End
|
||||||
|
|
||||||
|
# Wikimedia Start
|
||||||
|
127.0.0.1 wikimedia.org
|
||||||
|
127.0.0.1 upload.wikimedia.org
|
||||||
|
# Wikimedia End
|
||||||
|
|
||||||
|
# 顺手修一下Steam
|
||||||
|
# Steam Start
|
||||||
|
127.0.0.1 store.steampowered.com
|
||||||
|
127.0.0.1 steamcommunity.com
|
||||||
|
# Steam end
|
||||||
|
|
||||||
|
# AO3 Start
|
||||||
|
127.0.0.1 archiveofourown.org
|
||||||
|
# AO3 end
|
||||||
|
|
||||||
|
# Exhentai Start
|
||||||
|
127.0.0.1 exhentai.org
|
||||||
|
127.0.0.1 e-hentai.org
|
||||||
|
127.0.0.1 forums.e-hentai.org
|
||||||
|
# Exhentai end
|
||||||
|
|
||||||
|
# Nyaa Start
|
||||||
|
127.0.0.1 nyaa.si
|
||||||
|
127.0.0.1 www.nyaa.si
|
||||||
|
127.0.0.1 sukebei.nyaa.si
|
||||||
|
# Nyaae End
|
||||||
|
@ -15,7 +15,7 @@
|
|||||||
<p>Sorry, the page you are looking for is currently unavailable.<br/>
|
<p>Sorry, the page you are looking for is currently unavailable.<br/>
|
||||||
Please try again later.</p>
|
Please try again later.</p>
|
||||||
<p>If you are the system administrator of this resource then you should check
|
<p>If you are the system administrator of this resource then you should check
|
||||||
the <a href="http://nginx.org/r/error_log">error log</a> for details.</p>
|
the error log for details.</p>
|
||||||
<p><em>Faithfully yours, nginx.</em></p>
|
<p><em>Faithfully yours, nginx.</em></p>
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
@ -1 +1 @@
|
|||||||
9548
|
4624
|
||||||
|
@ -36,9 +36,9 @@ http {
|
|||||||
#gzip on;
|
#gzip on;
|
||||||
|
|
||||||
upstream www-pixiv-net {
|
upstream www-pixiv-net {
|
||||||
server 210.129.120.46:443;
|
server 210.140.131.182:443;
|
||||||
server 210.129.120.52:443;
|
server 210.140.131.180:443;
|
||||||
server 210.129.120.50:443;
|
server 210.140.131.184:443;
|
||||||
}
|
}
|
||||||
|
|
||||||
upstream sketch-pixiv-net {
|
upstream sketch-pixiv-net {
|
||||||
@ -106,13 +106,7 @@ http {
|
|||||||
ssl_certificate_key ca/pixiv.net.key;
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
proxy_pass https://i-pximg-net;
|
rewrite ^/(.*)$ https://i.pixiv.cat/$1 redirect;
|
||||||
proxy_set_header Host $http_host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
|
||||||
proxy_set_header User-Agent $http_user_agent;
|
|
||||||
proxy_set_header Accept-Encoding '';
|
|
||||||
proxy_buffering off;
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -176,7 +170,7 @@ http {
|
|||||||
ssl_certificate_key ca/pixiv.net.key;
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
proxy_pass https://210.129.120.50/;
|
proxy_pass https://210.140.131.222/;
|
||||||
proxy_set_header Host $http_host;
|
proxy_set_header Host $http_host;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Real_IP $remote_addr;
|
proxy_set_header X-Real_IP $remote_addr;
|
||||||
@ -191,6 +185,11 @@ http {
|
|||||||
server_name imgaz.pixiv.net;
|
server_name imgaz.pixiv.net;
|
||||||
server_name comic.pixiv.net;
|
server_name comic.pixiv.net;
|
||||||
server_name novel.pixiv.net;
|
server_name novel.pixiv.net;
|
||||||
|
server_name source.pixiv.net;
|
||||||
|
server_name i1.pixiv.net;
|
||||||
|
server_name i2.pixiv.net;
|
||||||
|
server_name i3.pixiv.net;
|
||||||
|
server_name i4.pixiv.net;
|
||||||
|
|
||||||
ssl on;
|
ssl on;
|
||||||
ssl_certificate ca/pixiv.net.crt;
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
@ -234,4 +233,17 @@ http {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name www.google.com;
|
||||||
|
|
||||||
|
ssl on;
|
||||||
|
ssl_certificate ca/pixiv.net.crt;
|
||||||
|
ssl_certificate_key ca/pixiv.net.key;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
rewrite ^/(.*)$ https://pages.shino.cc/$1 redirect;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
}
|
}
|
1
图片无法显示备用配置/使用方法.txt
Normal file
1
图片无法显示备用配置/使用方法.txt
Normal file
@ -0,0 +1 @@
|
|||||||
|
用本文件夹内的 nginx.conf 替换根目录 conf 文件夹中的 nginx.conf 文件
|
168
自签证书傻瓜式批处理包/config_childCA.txt
Normal file
168
自签证书傻瓜式批处理包/config_childCA.txt
Normal file
@ -0,0 +1,168 @@
|
|||||||
|
[ req ]
|
||||||
|
default_bits = 2048
|
||||||
|
|
||||||
|
prompt = no
|
||||||
|
distinguished_name = req_distinguished_name
|
||||||
|
req_extensions = v3_req
|
||||||
|
|
||||||
|
[ req_distinguished_name ]
|
||||||
|
countryName = CN
|
||||||
|
organizationName = C15412
|
||||||
|
commonName = C15412
|
||||||
|
|
||||||
|
[ alternate_names ]
|
||||||
|
DNS.0001 = *.pixiv.net
|
||||||
|
DNS.0002 = pixiv.net
|
||||||
|
DNS.0003 = *.secure.pixiv.net
|
||||||
|
DNS.0004 = pixivision.net
|
||||||
|
DNS.0005 = *.pixivision.net
|
||||||
|
DNS.0006 = pixiv.me
|
||||||
|
DNS.0007 = *.pixiv.me
|
||||||
|
DNS.0008 = pximg.net
|
||||||
|
DNS.0009 = *.pximg.net
|
||||||
|
DNS.0010 = pixivsketch.net
|
||||||
|
DNS.0011 = *.pixivsketch.net
|
||||||
|
DNS.0012 = public-api.secure.pixiv.net
|
||||||
|
DNS.0013 = wikipedia.org
|
||||||
|
DNS.0014 = *.wikipedia.org
|
||||||
|
DNS.0015 = m.wikipedia.org
|
||||||
|
DNS.0016 = *.m.wikipedia.org
|
||||||
|
DNS.0017 = google.com
|
||||||
|
DNS.0018 = *.google.com
|
||||||
|
DNS.0019 = archiveofourown.org
|
||||||
|
DNS.0020 = *.archiveofourown.org
|
||||||
|
DNS.0021 = nyaa.si
|
||||||
|
DNS.0022 = *.nyaa.si
|
||||||
|
DNS.0023 = wikimedia.org
|
||||||
|
DNS.0024 = *.wikimedia.org
|
||||||
|
DNS.0025 = exhentai.org
|
||||||
|
DNS.0026 = *.exhentai.org
|
||||||
|
DNS.0027 = e-hentai.org
|
||||||
|
DNS.0028 = *.e-hentai.org
|
||||||
|
DNS.0029 = ehgt.org
|
||||||
|
DNS.0030 = discordapp.com
|
||||||
|
DNS.0031 = *.discordapp.com
|
||||||
|
DNS.0032 = discordapp.net
|
||||||
|
DNS.0033 = *.discordapp.net
|
||||||
|
DNS.0034 = discord.com
|
||||||
|
DNS.0035 = *.discord.com
|
||||||
|
DNS.0036 = discord.gg
|
||||||
|
DNS.0037 = *.discord.gg
|
||||||
|
DNS.0038 = ext-twitch.tv
|
||||||
|
DNS.0039 = *.ext-twitch.tv
|
||||||
|
DNS.0040 = twitch.tv
|
||||||
|
DNS.0041 = *.twitch.tv
|
||||||
|
DNS.0042 = ubi.com
|
||||||
|
DNS.0043 = *.ubi.com
|
||||||
|
DNS.0044 = mega.co.nz
|
||||||
|
DNS.0045 = *.mega.co.nz
|
||||||
|
DNS.0046 = mega.nz
|
||||||
|
DNS.0047 = *.mega.nz
|
||||||
|
DNS.0048 = mega.io
|
||||||
|
DNS.0049 = *.mega.io
|
||||||
|
DNS.0050 = steamcommunity.com
|
||||||
|
DNS.0051 = *.steamcommunity.com
|
||||||
|
DNS.0052 = steampowered.com
|
||||||
|
DNS.0053 = *.steampowered.com
|
||||||
|
DNS.0054 = *.steamstatic.com
|
||||||
|
DNS.0055 = *.akamai.steamstatic.com
|
||||||
|
DNS.0056 = akamaihd.net
|
||||||
|
DNS.0057 = *.akamaihd.net
|
||||||
|
DNS.0058 = *.akamaized.net
|
||||||
|
DNS.0059 = *.akamaiedge.net
|
||||||
|
DNS.0060 = www.dlsite.com
|
||||||
|
DNS.0061 = download.dlsite.com
|
||||||
|
DNS.0062 = *.dlsite.com
|
||||||
|
DNS.0063 = *.origin.com
|
||||||
|
DNS.0064 = *.ea.com
|
||||||
|
DNS.0065 = githubusercontent.com
|
||||||
|
DNS.0066 = *.githubusercontent.com
|
||||||
|
DNS.0067 = github.com
|
||||||
|
DNS.0068 = *.github.com
|
||||||
|
DNS.0069 = patreon.com
|
||||||
|
DNS.0070 = *.patreon.com
|
||||||
|
DNS.0071 = patreonusercontent.com
|
||||||
|
DNS.0072 = *.patreonusercontent.com
|
||||||
|
DNS.0073 = fanbox.cc
|
||||||
|
DNS.0074 = downloads.fanbox.cc
|
||||||
|
DNS.0075 = *.fanbox.cc
|
||||||
|
DNS.0076 = *.ggpht.com
|
||||||
|
DNS.0077 = githubassets.com
|
||||||
|
DNS.0078 = *.githubassets.com
|
||||||
|
DNS.0079 = *.googlevideo.com
|
||||||
|
DNS.0080 = *.freenom.com
|
||||||
|
DNS.0081 = *.steam-chat.com
|
||||||
|
DNS.0082 = steam-chat.com
|
||||||
|
DNS.0083 = *.twitter.com
|
||||||
|
DNS.0084 = twitter.com
|
||||||
|
DNS.0085 = twimg.com
|
||||||
|
DNS.0086 = *.twimg.com
|
||||||
|
DNS.0087 = t.co
|
||||||
|
DNS.0088 = apkpure.com
|
||||||
|
DNS.0089 = *.apkpure.com
|
||||||
|
DNS.0090 = nhentai.net
|
||||||
|
DNS.0091 = *.nhentai.net
|
||||||
|
DNS.0092 = *.SharePoint.com
|
||||||
|
DNS.0093 = iwara.tv
|
||||||
|
DNS.0094 = *.iwara.tv
|
||||||
|
DNS.0095 = paypal.com
|
||||||
|
DNS.0096 = *.paypal.com
|
||||||
|
DNS.0097 = paypalobjects.com
|
||||||
|
DNS.0098 = *.paypalobjects.com
|
||||||
|
DNS.0099 = *.cloudflare.steamstatic.com
|
||||||
|
DNS.0100 = Instagram.com
|
||||||
|
DNS.0101 = *.Instagram.com
|
||||||
|
DNS.0102 = *.*.Instagram.com
|
||||||
|
DNS.0103 = *.*.*.Instagram.com
|
||||||
|
DNS.0104 = *.ig.me
|
||||||
|
DNS.0105 = ig.me
|
||||||
|
DNS.0106 = *.instagr.am
|
||||||
|
DNS.0107 = instagr.am
|
||||||
|
DNS.0108 = *.cdninstagram.com
|
||||||
|
DNS.0109 = guangdongvideo.com
|
||||||
|
DNS.0110 = *.guangdongvideo.com
|
||||||
|
DNS.0111 = fc2.com
|
||||||
|
DNS.0112 = *.live.fc2.com
|
||||||
|
DNS.0113 = *.fc2.com
|
||||||
|
DNS.0114 = *.google.ru
|
||||||
|
DNS.0115 = *.bilivideo.cn
|
||||||
|
DNS.0116 = *.bilivideo.com
|
||||||
|
DNS.0117 = *.steamserver.net
|
||||||
|
DNS.0118 = *.exhentai.org
|
||||||
|
DNS.0119 = wixmp.com
|
||||||
|
DNS.0120 = *.wixmp.com
|
||||||
|
DNS.0121 = ci-en.jp
|
||||||
|
DNS.0122 = *.ci-en.jp
|
||||||
|
DNS.0123 = reddit.com
|
||||||
|
DNS.0124 = *.reddit.com
|
||||||
|
DNS.0125 = redd.it
|
||||||
|
DNS.0126 = *.redd.it
|
||||||
|
DNS.0127 = redditstatic.com
|
||||||
|
DNS.0128 = *.redditstatic.com
|
||||||
|
DNS.0129 = redditmedia.com
|
||||||
|
DNS.0130 = *.redditmedia.com
|
||||||
|
DNS.0131 = *.thumbs.redditmedia.com
|
||||||
|
DNS.0132 = wallhaven.cc
|
||||||
|
DNS.0133 = *.wallhaven.cc
|
||||||
|
DNS.0134 = x.com
|
||||||
|
DNS.0135 = *.x.com
|
||||||
|
DNS.0136 = facebook.com
|
||||||
|
DNS.0137 = *.facebook.com
|
||||||
|
DNS.0138 = facebook.net
|
||||||
|
DNS.0139 = *.facebook.net
|
||||||
|
DNS.0140 = fbsbx.com
|
||||||
|
DNS.0141 = *.fbsbx.com
|
||||||
|
DNS.0142 = fbcdn.net
|
||||||
|
DNS.0143 = *.fbcdn.net
|
||||||
|
DNS.0144 = *.xx.fbcdn.net
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
[ v3_req ]
|
||||||
|
keyUsage = digitalSignature
|
||||||
|
extendedKeyUsage = "serverAuth,clientAuth"
|
||||||
|
basicConstraints = CA:false
|
||||||
|
subjectAltName = @alternate_names
|
||||||
|
subjectKeyIdentifier = hash
|
30
自签证书傻瓜式批处理包/config_rootCA.txt
Normal file
30
自签证书傻瓜式批处理包/config_rootCA.txt
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
[ req ]
|
||||||
|
default_bits = 2048
|
||||||
|
|
||||||
|
prompt = no
|
||||||
|
distinguished_name = req_distinguished_name
|
||||||
|
x509_extensions = v3_ca
|
||||||
|
v3_extensions = v3_ext
|
||||||
|
|
||||||
|
[ req_distinguished_name ]
|
||||||
|
countryName = CN
|
||||||
|
organizationName = NginxReverseProxy
|
||||||
|
commonName = Pixiv.net
|
||||||
|
|
||||||
|
[ v3_ext ]
|
||||||
|
keyUsage = keyCertSign,cRLSign
|
||||||
|
basicConstraints = critical,CA:true
|
||||||
|
subjectKeyIdentifier = hash
|
||||||
|
authorityKeyIdentifier = keyid,issuer
|
||||||
|
|
||||||
|
[ v3_ca ]
|
||||||
|
basicConstraints = critical,CA:TRUE
|
||||||
|
subjectKeyIdentifier = hash
|
||||||
|
authorityKeyIdentifier = keyid:always,issuer:always
|
||||||
|
|
||||||
|
[ v3_req ]
|
||||||
|
keyUsage = digitalSignature
|
||||||
|
extendedKeyUsage = "serverAuth,clientAuth"
|
||||||
|
basicConstraints = CA:TRUE
|
||||||
|
subjectAltName = @alternate_names
|
||||||
|
subjectKeyIdentifier = hash
|
24
自签证书傻瓜式批处理包/config_signCA.txt
Normal file
24
自签证书傻瓜式批处理包/config_signCA.txt
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
[ ca ]
|
||||||
|
default_ca = myca
|
||||||
|
|
||||||
|
[ myca ]
|
||||||
|
serial = ./crtserial.srl
|
||||||
|
database = ./index.txt
|
||||||
|
new_certs_dir = ./
|
||||||
|
certificate = ./rootCA.crt
|
||||||
|
private_key = ./rootCA.key
|
||||||
|
default_md = sha256
|
||||||
|
default_days = 3650
|
||||||
|
unique_subject = no
|
||||||
|
policy = my_policy
|
||||||
|
copy_extensions = copy
|
||||||
|
|
||||||
|
|
||||||
|
[ my_policy ]
|
||||||
|
countryName = optional
|
||||||
|
stateOrProvinceName = optional
|
||||||
|
localityName = optional
|
||||||
|
organizationName = optional
|
||||||
|
organizationalUnitName = optional
|
||||||
|
commonName = supplied
|
||||||
|
emailAddress = optional
|
9
自签证书傻瓜式批处理包/★使用说明★.txt
Normal file
9
自签证书傻瓜式批处理包/★使用说明★.txt
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
1.下载 OpenSSL(https://slproweb.com/products/Win32OpenSSL.html)安装,设置为「环境变量」(自行百度,只要在CMD中输入openssl有反应就行,而不是「'openssl' 不是内部或外部命令,也不是可运行的程序或批处理文件」)。
|
||||||
|
|
||||||
|
2.第一次使用时直接使用「【限初次使用】一键生成根证书和子证书.bat」并将rootCA.crt安装到系统受信任的根证书列表即可,生成的Pixiv.key和Pixiv.crt可替换软件自带的CA。
|
||||||
|
|
||||||
|
3.需要添加域名时通过修改「config_childCA.txt」加入
|
||||||
|
|
||||||
|
4.修改完后使用「【修改config_childCA.txt后使用】重新签发子证书.bat」,将新生成的「Pixiv.crt」和「pixiv.net.key」替换Nginx证书目录「/conf/ca」原先的文件,在系统host文件添加「127.0.0.1 域名」的字段
|
||||||
|
|
||||||
|
5.配置文件更新时仅需进行复制替换「config_childCA.txt」然后进行第4步
|
5
自签证书傻瓜式批处理包/【修改config_childCA.txt后使用】重新签发子证书.bat
Normal file
5
自签证书傻瓜式批处理包/【修改config_childCA.txt后使用】重新签发子证书.bat
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
del /f /s /q pixiv.net.csr
|
||||||
|
del /f /s /q pixiv.net.crt
|
||||||
|
.\openssl\openssl req -new -sha256 -key pixiv.net.key -out pixiv.net.csr -config config_childCA.txt
|
||||||
|
.\openssl\openssl ca -config config_signCA.txt -in pixiv.net.csr -out pixiv.net.crt
|
||||||
|
pause
|
7
自签证书傻瓜式批处理包/【可选】清理生成证书后产生的垃圾文件.bat
Normal file
7
自签证书傻瓜式批处理包/【可选】清理生成证书后产生的垃圾文件.bat
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
del /f /s /q *.pem
|
||||||
|
del /f /s /q crtserial.srl.old
|
||||||
|
del /f /s /q index.txt.old
|
||||||
|
del /f /s /q index.txt.attr
|
||||||
|
del /f /s /q index.txt.attr.old
|
||||||
|
echo 01 > crtserial.srl
|
||||||
|
break > index.txt
|
@ -0,0 +1,5 @@
|
|||||||
|
del /f /s /q pixiv.net.csr
|
||||||
|
del /f /s /q pixiv.net.crt
|
||||||
|
openssl req -new -sha256 -key pixiv.net.key -out pixiv.net.csr -config config_childCA.txt
|
||||||
|
openssl ca -config config_signCA.txt -in pixiv.net.csr -out pixiv.net.crt
|
||||||
|
pause
|
8
自签证书傻瓜式批处理包/【已安装openssl使用】【限初次使用】一键生成根证书和子证书.bat
Normal file
8
自签证书傻瓜式批处理包/【已安装openssl使用】【限初次使用】一键生成根证书和子证书.bat
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
echo 01 > crtserial.srl
|
||||||
|
break > index.txt
|
||||||
|
openssl genrsa -out pixiv.net.key 2048
|
||||||
|
openssl genrsa -out rootCA.key 2048
|
||||||
|
openssl req -new -x509 -key rootCA.key -out rootCA.crt -days 3650 -config config_rootCA.txt
|
||||||
|
openssl req -new -sha256 -key pixiv.net.key -out pixiv.net.csr -config config_childCA.txt
|
||||||
|
openssl ca -config config_signCA.txt -in pixiv.net.csr -out pixiv.net.crt
|
||||||
|
pause
|
8
自签证书傻瓜式批处理包/【限初次使用】一键生成根证书和子证书.bat
Normal file
8
自签证书傻瓜式批处理包/【限初次使用】一键生成根证书和子证书.bat
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
echo 01 > crtserial.srl
|
||||||
|
break > index.txt
|
||||||
|
.\openssl\openssl genrsa -out pixiv.net.key 2048
|
||||||
|
.\openssl\openssl genrsa -out rootCA.key 2048
|
||||||
|
.\openssl\openssl req -new -x509 -key rootCA.key -out rootCA.crt -days 3650 -config config_rootCA.txt
|
||||||
|
.\openssl\openssl req -new -sha256 -key pixiv.net.key -out pixiv.net.csr -config config_childCA.txt
|
||||||
|
.\openssl\openssl ca -config config_signCA.txt -in pixiv.net.csr -out pixiv.net.crt
|
||||||
|
pause
|
BIN
自签证书傻瓜式批处理包/演示01:一键生成证书.gif
Normal file
BIN
自签证书傻瓜式批处理包/演示01:一键生成证书.gif
Normal file
Binary file not shown.
After Width: | Height: | Size: 280 KiB |
BIN
自签证书傻瓜式批处理包/演示02:添加域名.gif
Normal file
BIN
自签证书傻瓜式批处理包/演示02:添加域名.gif
Normal file
Binary file not shown.
After Width: | Height: | Size: 645 KiB |
13
自签证书傻瓜式批处理包/自签证书★使用说明★.txt
Normal file
13
自签证书傻瓜式批处理包/自签证书★使用说明★.txt
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
1、
|
||||||
|
配置文件一起的还有一个openssl压缩包,可供未安装openssl的使用,把压缩包里面的openssl文件夹解压到自签证书批处理包的文件夹里面即可
|
||||||
|
|
||||||
|
2.第一次使用时直接使用「【限初次使用】一键生成根证书和子证书.bat」并将 rootCA.crt 安装到 系统 受信任的根证书颁发机构 目录下,生成的Pixiv.net.key和Pixiv.net.crt可替换软件自带的CA。
|
||||||
|
|
||||||
|
导入根证书具体操作:双击打开rootCA.crt,点击“安装证书”,进入“证书导入向导”,存储位置选择“本地计算机”,单击“下一步”继续,选择“将所有的证书都放入下列存储”,然后点击“浏览”,选择“受信任的根证书颁发机构”,然后点击“确定”,然后点击“下一步”,最后点击“完成”
|
||||||
|
|
||||||
|
|
||||||
|
3.需要添加域名时打开「config_childCA.txt」加入,完后使用「【修改config_childCA.txt后使用】重新签发子证书.bat」,将新生成的Pixiv.net.crt和Pixiv.net.key替换Nginx目录原先的文件,在系统host文件添加「127.0.0.1 域名」的字段, 并修改根目录「/conf/pixiv.conf」。
|
||||||
|
|
||||||
|
|
||||||
|
生成的子证书存放目录:nginx安装目录/conf/ca
|
||||||
|
生成证书时如果需要操作请输入英文字母y然后回车
|
@ -1,16 +0,0 @@
|
|||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIICfzCCAegCCQCAFez22a+CnTANBgkqhkiG9w0BAQUFADCBgzELMAkGA1UEBhMC
|
|
||||||
Q04xETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQHDAhTaGFuZ2hhaTEUMBIGA1UE
|
|
||||||
CgwLTWFzaGlybyBMTEMxEDAOBgNVBAsMB01hc2hpcm8xJjAkBgNVBAMMHU1hc2hp
|
|
||||||
cm8gSW50ZXJuZXQgQXV0aG9yaXR5IENBMB4XDTE4MDkxNjA4MzQxNVoXDTI4MDkx
|
|
||||||
MzA4MzQxNVowgYMxCzAJBgNVBAYTAkNOMREwDwYDVQQIDAhTaGFuZ2hhaTERMA8G
|
|
||||||
A1UEBwwIU2hhbmdoYWkxFDASBgNVBAoMC01hc2hpcm8gTExDMRAwDgYDVQQLDAdN
|
|
||||||
YXNoaXJvMSYwJAYDVQQDDB1NYXNoaXJvIEludGVybmV0IEF1dGhvcml0eSBDQTCB
|
|
||||||
nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAugoR9OzVDTN0lXToRH+kQ2qjV+UI
|
|
||||||
tXR6WVXwYyyqcihrhe5A9SQ21LJRoyZlSOVdg85QvhBJeLgOgtGVZZla1z6TjMDx
|
|
||||||
rfTIjHKRVj9/kyujkxtY0w2iZnz1pd31A+UJdQwnDMeyBZagRVQD/7xn1wV72bS8
|
|
||||||
vyhEh0Q/ZUZGxrcCAwEAATANBgkqhkiG9w0BAQUFAAOBgQAX+noK9G1vvNFB8ZXq
|
|
||||||
MNYf7qimQTjxTBGQLijrNCyiqOkw8YW1BgdnaV0Vc97L7nqRx1XGEAvPHiGEC/Xk
|
|
||||||
xu9Mj+gwTEFRXBauoPBFElnBuQaePYmCHB+eCODPLwkgkhh3/HUr0385bTvVwoqX
|
|
||||||
AsTNS/eeFFtZ88cLcdCBbupWiw==
|
|
||||||
-----END CERTIFICATE-----
|
|
@ -1,71 +0,0 @@
|
|||||||
Certificate:
|
|
||||||
Data:
|
|
||||||
Version: 3 (0x2)
|
|
||||||
Serial Number: 5 (0x5)
|
|
||||||
Signature Algorithm: sha256WithRSAEncryption
|
|
||||||
Issuer: C=CN, ST=Shanghai, L=Shanghai, O=Mashiro LLC, OU=Mashiro, CN=Mashiro Internet Authority CA
|
|
||||||
Validity
|
|
||||||
Not Before: Sep 16 16:57:32 2018 GMT
|
|
||||||
Not After : Sep 13 16:57:32 2028 GMT
|
|
||||||
Subject: C=CN, ST=Shanghai, O=Mashiro LLC, OU=Mashiro, CN=*.pixiv.net
|
|
||||||
Subject Public Key Info:
|
|
||||||
Public Key Algorithm: rsaEncryption
|
|
||||||
Public-Key: (2048 bit)
|
|
||||||
Modulus:
|
|
||||||
00:a9:84:77:44:2f:77:cf:5a:de:59:4c:ce:15:c1:
|
|
||||||
bc:db:6d:43:1e:6f:f2:2e:46:f5:a4:74:bc:f6:92:
|
|
||||||
60:77:b2:cd:79:bf:d7:65:2b:54:78:48:6d:ab:2f:
|
|
||||||
6b:f8:63:c1:69:a1:1d:b2:b5:78:e4:2b:b7:ad:62:
|
|
||||||
d6:14:aa:7a:24:97:72:d2:81:f7:e3:d7:b4:76:1f:
|
|
||||||
94:de:74:5c:b0:b1:6c:31:21:2f:c4:3e:58:41:3b:
|
|
||||||
ab:06:e5:8a:28:80:fd:c3:a1:b5:dc:db:c7:4f:62:
|
|
||||||
bd:cc:ff:ee:b5:e9:21:5f:9b:88:20:ab:c3:36:f9:
|
|
||||||
82:22:3c:88:6e:d9:69:cd:ad:c0:2b:5e:19:68:e7:
|
|
||||||
ff:2a:64:90:24:32:07:ab:2c:67:a9:ab:2d:75:ef:
|
|
||||||
85:26:df:37:67:c3:53:31:0e:9c:8c:58:aa:24:f3:
|
|
||||||
e2:5f:2b:1c:fc:72:45:34:94:9b:b4:69:cb:ef:a3:
|
|
||||||
6d:8f:f7:ab:4c:83:77:84:e8:ac:e6:b7:17:58:e8:
|
|
||||||
c2:47:ce:08:35:32:9a:45:79:15:e4:f4:07:92:ee:
|
|
||||||
79:64:cc:41:6b:5d:a4:4c:46:72:2f:5a:7a:66:38:
|
|
||||||
df:3d:58:8f:02:79:4b:ea:0f:8b:0c:33:cc:41:79:
|
|
||||||
0f:3c:16:91:0c:67:44:6d:42:7e:1c:cb:2f:d6:1f:
|
|
||||||
6b:fb
|
|
||||||
Exponent: 65537 (0x10001)
|
|
||||||
X509v3 extensions:
|
|
||||||
X509v3 Basic Constraints:
|
|
||||||
CA:FALSE
|
|
||||||
X509v3 Subject Alternative Name:
|
|
||||||
DNS:*.pixiv.net, DNS:pixiv.net, DNS:*.secure.pixiv.net, DNS:pximg.net, DNS:*.pximg.net, DNS:wikipedia.org, DNS:*.wikipedia.org, DNS:google.com, DNS:*.google.com, IP Address:127.0.0.1
|
|
||||||
X509v3 Subject Key Identifier:
|
|
||||||
A7:E1:07:03:F4:8A:62:A6:32:C3:98:CC:C1:3E:37:33:56:22:DA:21
|
|
||||||
Signature Algorithm: sha256WithRSAEncryption
|
|
||||||
8d:e9:35:fa:68:71:c0:12:f5:d1:4c:2a:91:29:96:e5:7c:26:
|
|
||||||
1c:05:66:29:31:42:c1:9f:fb:2f:6c:2f:47:20:1d:dd:d2:c4:
|
|
||||||
7f:4d:df:a6:0b:91:13:bc:38:28:87:aa:a5:f5:6b:88:fb:04:
|
|
||||||
92:ad:d2:3f:82:70:5e:de:e5:bd:74:f2:86:c0:22:61:61:30:
|
|
||||||
e1:02:02:1d:89:6d:97:38:cb:0b:32:bb:37:32:08:7f:5e:ab:
|
|
||||||
15:79:93:e6:8f:d0:40:78:5b:b0:a2:b0:d2:e5:04:01:65:74:
|
|
||||||
bf:57:42:ea:9c:5b:93:c6:96:26:34:bc:f0:d7:46:6a:ad:7c:
|
|
||||||
2f:92
|
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIDnDCCAwWgAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCQ04x
|
|
||||||
ETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQHDAhTaGFuZ2hhaTEUMBIGA1UECgwL
|
|
||||||
TWFzaGlybyBMTEMxEDAOBgNVBAsMB01hc2hpcm8xJjAkBgNVBAMMHU1hc2hpcm8g
|
|
||||||
SW50ZXJuZXQgQXV0aG9yaXR5IENBMB4XDTE4MDkxNjE2NTczMloXDTI4MDkxMzE2
|
|
||||||
NTczMlowXjELMAkGA1UEBhMCQ04xETAPBgNVBAgMCFNoYW5naGFpMRQwEgYDVQQK
|
|
||||||
DAtNYXNoaXJvIExMQzEQMA4GA1UECwwHTWFzaGlybzEUMBIGA1UEAwwLKi5waXhp
|
|
||||||
di5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphHdEL3fPWt5Z
|
|
||||||
TM4VwbzbbUMeb/IuRvWkdLz2kmB3ss15v9dlK1R4SG2rL2v4Y8FpoR2ytXjkK7et
|
|
||||||
YtYUqnokl3LSgffj17R2H5TedFywsWwxIS/EPlhBO6sG5YoogP3DobXc28dPYr3M
|
|
||||||
/+616SFfm4ggq8M2+YIiPIhu2WnNrcArXhlo5/8qZJAkMgerLGepqy1174Um3zdn
|
|
||||||
w1MxDpyMWKok8+JfKxz8ckU0lJu0acvvo22P96tMg3eE6KzmtxdY6MJHzgg1MppF
|
|
||||||
eRXk9AeS7nlkzEFrXaRMRnIvWnpmON89WI8CeUvqD4sMM8xBeQ88FpEMZ0RtQn4c
|
|
||||||
yy/WH2v7AgMBAAGjgb8wgbwwCQYDVR0TBAIwADCBjwYDVR0RBIGHMIGEggsqLnBp
|
|
||||||
eGl2Lm5ldIIJcGl4aXYubmV0ghIqLnNlY3VyZS5waXhpdi5uZXSCCXB4aW1nLm5l
|
|
||||||
dIILKi5weGltZy5uZXSCDXdpa2lwZWRpYS5vcmeCDyoud2lraXBlZGlhLm9yZ4IK
|
|
||||||
Z29vZ2xlLmNvbYIMKi5nb29nbGUuY29thwR/AAABMB0GA1UdDgQWBBSn4QcD9Ipi
|
|
||||||
pjLDmMzBPjczViLaITANBgkqhkiG9w0BAQsFAAOBgQCN6TX6aHHAEvXRTCqRKZbl
|
|
||||||
fCYcBWYpMULBn/svbC9HIB3d0sR/Td+mC5ETvDgoh6ql9WuI+wSSrdI/gnBe3uW9
|
|
||||||
dPKGwCJhYTDhAgIdiW2XOMsLMrs3Mgh/XqsVeZPmj9BAeFuworDS5QQBZXS/V0Lq
|
|
||||||
nFuTxpYmNLzw10ZqrXwvkg==
|
|
||||||
-----END CERTIFICATE-----
|
|
@ -1,28 +0,0 @@
|
|||||||
-----BEGIN PRIVATE KEY-----
|
|
||||||
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCphHdEL3fPWt5Z
|
|
||||||
TM4VwbzbbUMeb/IuRvWkdLz2kmB3ss15v9dlK1R4SG2rL2v4Y8FpoR2ytXjkK7et
|
|
||||||
YtYUqnokl3LSgffj17R2H5TedFywsWwxIS/EPlhBO6sG5YoogP3DobXc28dPYr3M
|
|
||||||
/+616SFfm4ggq8M2+YIiPIhu2WnNrcArXhlo5/8qZJAkMgerLGepqy1174Um3zdn
|
|
||||||
w1MxDpyMWKok8+JfKxz8ckU0lJu0acvvo22P96tMg3eE6KzmtxdY6MJHzgg1MppF
|
|
||||||
eRXk9AeS7nlkzEFrXaRMRnIvWnpmON89WI8CeUvqD4sMM8xBeQ88FpEMZ0RtQn4c
|
|
||||||
yy/WH2v7AgMBAAECggEAWSrltYcmhXrt5JlC+izLk7x4hsUp5e/LfHMvhp/egHgc
|
|
||||||
H0OrIHtXVmH61gX+zExky5RFU+CjM5pPZrPLmllGIINNka9t3npzYYMhQpaAvyzE
|
|
||||||
lV84igilUcL6JomNT9ryIPqp9//fakGtRu0E+skjle/w/gZ7jCpYqnue5HgWcGpu
|
|
||||||
cUTABq96kRzY8winNZcfbBw2uIdpKGDXMxWnepVbhNNzXpns0ivJ7+MrUSKLX1a2
|
|
||||||
nCPQkRjAZHYMgRIKfPbSwcyRcHHsO5CyCY71uiqFBy2aDtamD/r9QOFTEdvTMddf
|
|
||||||
aP1RU8eSb2mDDrWPySbkYTGuehcfXcroxBFkQnRn0QKBgQDbB6qyIF/bVVATZBpR
|
|
||||||
TBu1CQuiowEbvSm+XCA2vig4A5IJ6JnUaS+wc2BBM2RUBLYbHKb4lEGGmpnGGHCD
|
|
||||||
sxy64PhAvzWqbn9hvU3HwDwPZzUqWGHq9yaFbgD/LK/Vl57ow/oRV7a0u9hAJOPx
|
|
||||||
mR70uqvfr6HTMbCmjY/k4TfvAwKBgQDGIVpLo+Bjz62c8YJEiOqQjB1yFuqRP4OH
|
|
||||||
K6MmyMEc6H2619RyyrDbkMNVpwHNwChTUNcwAqFYvEqRGrvQ5dO8whYxEli/0cIR
|
|
||||||
jOgzbGLXst3nIbzm30MeknnoWVCrMiqXeCNtwnUifKS4WvBs0Bdn4KBZTiytNN6K
|
|
||||||
xhZJPgvhqQKBgDADKDnPuvN7agg2I0a65j/y8af/D1kjSClATJdza6GLttGROVdE
|
|
||||||
j32gbPMd7to0Bi8/QqKu7QYykY7JALD97EhS1FhtEbiAbE/ijVBCJWhC+XaE1UIK
|
|
||||||
V1lcWb+V7h1mFSF1BDYVAinwG2FENOta41xGJzLrbw+6jryTv30umXI9AoGBAL2k
|
|
||||||
JPJrjBbdLJchDwgcaTAr/O88Ag8+1N0npoUz+Kt72QRjG4U4fynaGS29qdtPRwng
|
|
||||||
QehBTEBMEa9sAEOGCDIPMACOSAZqdrAnyAWYg89j9EQMJexx3KPBnhAIlU8XuG68
|
|
||||||
3mRrkYSN+3g+CwyL7StPdQul6Nts1GnOCnzWd7bpAoGBANkO5h+oUhd4y8tCX3vX
|
|
||||||
mT98imjvCnvW1KTKa9YHL0OEH5aEPKDzUwHyqtUJCsw7YTk0+z/XtiVm9/V/1t76
|
|
||||||
Dllt7KaEI6MszXD8QgBDpkCp8N2zmTT5URKbV33odGXYJPcA908RiqDCBmw3zxjZ
|
|
||||||
cCSu7rDx8R2i8DFU9frXY81l
|
|
||||||
-----END PRIVATE KEY-----
|
|
@ -1,42 +0,0 @@
|
|||||||
#Pixiv Start
|
|
||||||
127.0.0.1 pixiv.net
|
|
||||||
127.0.0.1 www.pixiv.net
|
|
||||||
127.0.0.1 ssl.pixiv.net
|
|
||||||
127.0.0.1 accounts.pixiv.net
|
|
||||||
127.0.0.1 touch.pixiv.net
|
|
||||||
127.0.0.1 oauth.secure.pixiv.net
|
|
||||||
127.0.0.1 dic.pixiv.net
|
|
||||||
127.0.0.1 en-dic.pixiv.net
|
|
||||||
127.0.0.1 sketch.pixiv.net
|
|
||||||
127.0.0.1 payment.pixiv.net
|
|
||||||
127.0.0.1 factory.pixiv.net
|
|
||||||
127.0.0.1 comic.pixiv.net
|
|
||||||
127.0.0.1 novel.pixiv.net
|
|
||||||
127.0.0.1 imgaz.pixiv.net
|
|
||||||
127.0.0.1 sensei.pixiv.net
|
|
||||||
127.0.0.1 fanbox.pixiv.net
|
|
||||||
127.0.0.1 i.pximg.net
|
|
||||||
210.140.131.145 source.pixiv.net
|
|
||||||
210.129.120.50 app-api.pixiv.net
|
|
||||||
74.120.148.207 g-client-proxy.pixiv.net
|
|
||||||
210.140.131.145 i1.pixiv.net
|
|
||||||
210.140.131.145 i2.pixiv.net
|
|
||||||
210.140.131.145 i3.pixiv.net
|
|
||||||
210.140.131.145 i4.pixiv.net
|
|
||||||
210.140.131.159 d.pixiv.org
|
|
||||||
210.140.92.135 pixiv.pximg.net
|
|
||||||
210.140.92.134 s.pximg.net
|
|
||||||
#Pixiv End
|
|
||||||
|
|
||||||
# 顺手修一下维基百科
|
|
||||||
# Wikipedia Start
|
|
||||||
127.0.0.1 zh.wikipedia.org #中文维基百科桌面版
|
|
||||||
127.0.0.1 zh-yue.wikipedia.org #粤文维基百科桌面版
|
|
||||||
127.0.0.1 wuu.wikipedia.org #吴语维基百科桌面版
|
|
||||||
127.0.0.1 ug.wikipedia.org #维吾尔文维基百科桌面版
|
|
||||||
127.0.0.1 ja.wikipedia.org #日文维基百科桌面版
|
|
||||||
127.0.0.1 zh.wikinews.org #中文维基新闻桌面版
|
|
||||||
127.0.0.1 zh.m.wikipedia.org #中文维基百科移动版
|
|
||||||
127.0.0.1 ug.m.wikipedia.org #维吾尔文维基百科移动版
|
|
||||||
127.0.0.1 zh.m.wikinews.org #中文维基新闻移动版
|
|
||||||
# Wikipedia End
|
|
Loading…
Reference in New Issue
Block a user