@skiy “ ip:端口 ” 访问不了，“ 域名：端口 “ 就可以访问。

@ericzhou1994 看起来不错，合适小白吧，我还是喜欢折腾。

server {
listen 443;
server_name www.domain.com;

# SSL 证书和密钥的配置
ssl_certificate /path/to/ssl_cert.crt;
ssl_certificate_key /path/to/ssl_cert.key;

location /path1 {
proxy_pass https://127.0.0.1:8001; # 后端服务 1 的 HTTPS 地址
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 可以添加其他与反向代理相关的设置
}

location /path2 {
proxy_pass http://127.0.0.1:8002; # 后端服务 2 的 HTTP 地址
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 可以添加其他与反向代理相关的设置
}

location /path3 {
proxy_pass https://127.0.0.1:8003; # 后端服务 3 的 HTTPS 地址
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 可以添加其他与反向代理相关的设置
}

# 静态文件处理
location /static/ {
alias /path/to/static/files/;
# 可以添加其他与静态文件相关的设置
}

# 错误页面处理
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

# 安全性设置
# 添加适当的安全性设置

# 其他路径和配置...
}

@allplay server {
listen 443;
server_name www.domain.com;
location /path1 {
proxy_pass http://127.0.0.1:8001; # 将 /path1 请求代理到后端服务 1 ，该服务监听在 8001 端口
}
location /path2 {
proxy_pass http://127.0.0.1:8002; # 将 /path2 请求代理到后端服务 2 ，该服务监听在 8002 端口
}
location /path3 {
proxy_pass http://127.0.0.1:8003; # 将 /path3 请求代理到后端服务 3 ，该服务监听在 8003 端口
}
# 其他路径和配置...
}

是这个吧？

@skiy https://s2.loli.net/2023/08/07/plbymSnV2htXoQD.png

@skiy https://cdn.staticaly.com/gh/miaomiao2021/JIYU@main/PicX/WeChat 截图_20230807204658.4g5vdv9vxc80.jpg

@skiy 

ios 没事吧，安卓问题太严重


@skiy 
刚才已经配置了通配符，xxx.top,*.xxx.top

nginx 配了 listen 18086

有 win 的吗

@HeyEvan
只有这个改吗，其它不用改？

@HeyEvan 没懂，就是上面
server 127.0.0.1:14000;

打开 vaultwarden：ip:8086

@HeyEvan trojan 占用了 443,利用 SNI 分流实现。就是死活不显示 https.

第一个配置文件 nginx.conf

user nginx;
worker_processes auto;

error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;


events {
worker_connections 1024;
}


http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

sendfile on;
#tcp_nopush on;

keepalive_timeout 65;

#gzip on;

include /etc/nginx/conf.d/*.conf;
}



stream {
# 这里就是 SNI 识别，将域名映射成一个配置名，请修改自己的一级域名
map $ssl_preread_server_name $backend_name {
xxx.com web;
t.xxx.com trojan;
b.xxx.com vaultwarden;
# 域名都不匹配情况下的默认值
default web;
}
# web ，配置转发详情
upstream web {
server 127.0.0.1:12000;
}
# trojan ，配置转发详情
upstream trojan {
server 127.0.0.1:13000;
}

# Vaultwarden ，配置转发详情
upstream vaultwarden {
server 127.0.0.1:14000;
}

# 监听 443 并开启 ssl_preread
server {
listen 443 reuseport;
listen [::]:443 reuseport;
proxy_pass $backend_name;
ssl_preread on;
}
}




第二个配置文件 default.conf

upstream web {
server 127.0.0.1:12000;
}

server {
listen 12000 ssl;
#填写绑定证书的域名
server_name xxx.com www.xxx.com;
#证书文件名称
ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
#私钥文件名称
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
#网站主页路径。此路径仅供参考，具体请您按照实际目录操作。
root /var/www/html/public;
index index.php index.html index.htm;
}
}

server {
listen 80 ;
#填写绑定证书的域名
server_name xxx.com www.xxx.com;
#把 http 的域名请求转成 https
return 301 https://$host$request_uri;
}



upstream vaultwarden {
server 127.0.0.1:14000;
}

server {
listen 14000 ssl;
server_name b.xxx.com;

ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem;

ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;

location / {
proxy_pass http://vaultwarden;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_read_timeout 86400;
proxy_redirect off;
}
}

server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
return 301 https://$host$request_uri;
}

@0o0O0o0O0o @tylinux @HeyEvan

打开了，就是没显示 https,是什么问题？
[url=https://smms.app/image/8j3fs1DOZqFyow5][img]https://s2.loli.net/2023/08/04/8j3fs1DOZqFyow5.png[/img][/url]
https://s2.loli.net/2023/08/04/8j3fs1DOZqFyow5.png

upstream vaultwarden {
server 127.0.0.1:13886;
}

server {
listen 13886 ssl;
server_name b.xxx.com;

ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem;

ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;

location / {
proxy_pass http://vaultwarden;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_read_timeout 86400;
proxy_redirect off;
}
}

server {
listen 80 ;
#填写绑定证书的域名
server_name b.xxx.com;
#把 http 的域名请求转成 https
return 301 https://$host$request_uri;
#return 301 https://www.xxx.com;
}

@0o0O0o0O0o @tylinux @HeyEvan

@tylinux 没用，官方的太大，只能换。

@HeyEvan 官方的, 官方的太大。

@0o0O0o0O0o 原来如此，多谢！！