Nginx反代Harbor配置(Docker)
内容导读
互联网集市收集整理的这篇技术教程文章主要介绍了Nginx反代Harbor配置(Docker)，小编现在分享给大家，供广大互联网技能从业者学习和参考。文章包含5038字，纯文字阅读大概需要8分钟。
内容图文
方式一:
说明:Docker安装Harbor,Nginx和Harbor在同一台服务器,Nginx反代到Docker的Harbor访问.
环境:
IP地址(内网):192.168.193.121
服务器版本:CentOS Linux release 7.4.1708 (Core)
Harbor版本:harbor-offline-installer-v2.1.2.tgz
Docker-compose版本:
[root@ebs-26562 conf]# docker-compose version docker-compose version 1.27.4, build 40524192 docker-py version: 4.3.1 CPython version: 3.7.7 OpenSSL version: OpenSSL 1.1.0l10 Sep 2019
Docker 版本:
[root@ebs-26562 conf]# docker version Client: Docker Engine - Community Version: 19.03.5 API version: 1.40 Go version: go1.12.12 Git commit: 633a0ea Built: Wed Nov 1307:25:412019 OS/Arch: linux/amd64 Experimental: false Server: Docker Engine - Community Engine: Version: 19.03.5 API version: 1.40 (minimum version 1.12) Go version: go1.12.12 Git commit: 633a0ea Built: Wed Nov 1307:24:182019 OS/Arch: linux/amd64 Experimental: false containerd: Version: 1.2.10 GitCommit: b34a5c8af56e510852c35414db4c1f4fa6172339 runc: Version: 1.0.0-rc8+dev GitCommit: 3e425f80a8c931f88e6d94a8c831b9d5aa481657 docker-init: Version: 0.18.0 GitCommit: fec3683
解压Harbor修改Harbor.yml安装配置.
[root@ebs-26562 harbor]# cat harbor.yml # Configuration file of Harbor # The IP address or hostname to access admin UI and registry service. # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients. hostname: harbor.xxx.com # http related config http: # port for http, defaultis80. If https enabled, this port will redirect to https port port: 899 #端口可以自定义. # https related config #https: # https port for harbor, defaultis443 # port: 443 # The path of cert and key files for nginx # certificate: /your/certificate/path # private_key: /your/private/key/path # # Uncomment following will enable tls communication between all harbor components # internal_tls: # # set enabled to true means internal tls is enabled # enabled: true # # put your cert and key files on dir # dir: /etc/harbor/tls/internal # Uncomment external_url if you want to enable external proxy # And when it enabled the hostname will no longer used external_url: http://harbor.xxx.com #这个位置一定要这样写,不能写https # The initial password of Harbor admin # It only works in first time to install harbor # Remember Change the admin password from UI after launching Harbor. harbor_admin_password: Harborxxx
Nginx反代配置
server {
listen
443
ssl;
listen
80
;
server_name harbor.xxx.com;
ssl_certificate cert/harbor.xxx.com.pem;
ssl_certificate_key cert/harbor.xxx.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:899; proxy_set_header Host $host:$server_port;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect http:// $scheme://;
client_max_body_size 0;
}
}
方式二:
说明:harbor和Nginx在2台服务器上,通过内网反代.
Harbor:192.168.191.121
Nginx:192.168.191.80
Harbor.yml配置
[root@ebs-26562 harbor]# cat harbor.yml # Configuration file of Harbor # The IP address or hostname to access admin UI and registry service. # DO NOT use localhost or 127.0.0.1, because Harbor needs to be accessed by external clients. hostname: harbor.xxx.com # http related config http: # port for http, defaultis80. If https enabled, this port will redirect to https port port: 899 # https related config #https: # https port for harbor, defaultis443 # port: 443 # The path of cert and key files for nginx # certificate: /your/certificate/path # private_key: /your/private/key/path # # Uncomment following will enable tls communication between all harbor components # internal_tls: # # set enabled to true means internal tls is enabled # enabled: true # # put your cert and key files on dir # dir: /etc/harbor/tls/internal # Uncomment external_url if you want to enable external proxy # And when it enabled the hostname will no longer used external_url: http://harbor.xxx.com #这一句可注释掉,也可以不注释. # The initial password of Harbor admin # It only works in first time to install harbor # Remember Change the admin password from UI after launching Harbor. harbor_admin_password: Harbor12345
Nginx配置:
upstream harbor {
server
192.168.193.121:899 weight=1;
}
server {
listen 80;
listen 443 ssl;
server_name harbor.xxx.com;
ssl_certificate cert/harbor.xxx.com.pem;
ssl_certificate_key cert/harbor.xxx.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://harbor; proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 20m;
client_body_buffer_size 128k;
proxy_connect_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 6 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
}
原文：https://www.cnblogs.com/bretzhao/p/14681934.html
内容总结
以上是互联网集市为您收集整理的Nginx反代Harbor配置(Docker)全部内容，希望文章能够帮你解决Nginx反代Harbor配置(Docker)所遇到的程序开发问题。 如果觉得互联网集市技术教程内容还不错，欢迎将互联网集市网站推荐给程序员好友。
内容备注
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 gblab@vip.qq.com 举报，一经查实，本站将立刻删除。
内容手机端
扫描二维码推送至手机访问。
来源：【匿名】