whm/web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(nginx): 延迟解析 upstream，避免 Docker/Podman 启动时 host not found

Browse Source 
Made-with: Cursor
This commit is contained in:
whm
2026-03-21 23:46:28 +08:00
parent 77febfacc7
commit 89cd8f83bc
1 changed files with 15 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
nginx/yuheng.docker.conf
View File

@@ -1,11 +1,18 @@
# 供 docker-compose 中 nginx 使用：仅监听 443，反代到 api/web/admin；证书挂载到 /etc/ssl/yh_web/yuheng.yuxindazhineng.com/ # 供 docker-compose 中 nginx 使用：仅监听 443，反代到 api/web/admin；证书挂载到 /etc/ssl/yh_web/yuheng.yuxindazhineng.com/
#
# 使用 resolver + 变量形式的 proxy_pass：避免启动时同步解析 upstream 主机名失败
#（Docker/Podman 在 yh_nginx 刚起来时，内置 DNS 里可能还没有 web/admin/api，会报 host not found in upstream "web"）
server { server {
listen 443 ssl http2; listen 443 ssl;
listen [::]:443 ssl http2; listen [::]:443 ssl;
http2 on;
server_name yuheng.yuxindazhineng.com; server_name yuheng.yuxindazhineng.com;
client_max_body_size 800m; client_max_body_size 800m;
# Docker Compose 内置 DNS；若 Podman 下首包 502，可在此增加本网关 IP（podman network inspect 查看）
resolver 127.0.0.11 valid=10s ipv6=off;
ssl_certificate /etc/ssl/yh_web/yuheng.yuxindazhineng.com/fullchain.pem; ssl_certificate /etc/ssl/yh_web/yuheng.yuxindazhineng.com/fullchain.pem;
ssl_certificate_key /etc/ssl/yh_web/yuheng.yuxindazhineng.com/privkey.pem; ssl_certificate_key /etc/ssl/yh_web/yuheng.yuxindazhineng.com/privkey.pem;
ssl_session_timeout 1d; ssl_session_timeout 1d;
@@ -14,7 +21,8 @@ server {
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;
location / { location / {
proxy_pass http://web:80; set $upstream_web web;
proxy_pass http://$upstream_web:80;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
@@ -23,7 +31,8 @@ server {
} }
location /admin/ { location /admin/ {
proxy_pass http://admin:80/; set $upstream_admin admin;
proxy_pass http://$upstream_admin:80/;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
@@ -33,7 +42,8 @@ server {
# 不要用尾部斜杠，否则 /api/health 会变成 /health，而后端注册的是 /api/health # 不要用尾部斜杠，否则 /api/health 会变成 /health，而后端注册的是 /api/health
location /api/ { location /api/ {
proxy_pass http://api:8088; set $upstream_api api;
proxy_pass http://$upstream_api:8088;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;