JumpServer 环境整合

1 操作过程

1.1 编辑配置文件

  1. vi /etc/nginx/conf.d/jumpserver.conf

1.2 选择部署方式

源代码部署使用 Release

  1. server {
  2.   listen 80;
  3.   # server_name _;
  5.   client_max_body_size 5000m; 文件大小限制
  7.   # Luna 配置
  8.   location /luna/ {
  9.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  10.     # proxy_pass       http://127.0.0.1:4200;
  11.     proxy_pass http://luna:4200;
  12.   }
  14.   # Core data 静态资源
  15.   location /media/replay/ {
  16.     add_header Content-Encoding gzip;
  17.     root /opt/jumpserver-v3.0.1/data/;
  18.   }
  20.   location /media/ {
  21.     root /opt/jumpserver-v3.0.1/data/;
  22.   }
  24.   location /static/ {
  25.     root /opt/jumpserver-v3.0.1/data/;
  26.   }
  28.   # KoKo Lion 配置
  29.   location /koko/ {
  30.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  31.     # proxy_pass       http://127.0.0.1:5000;
  32.     proxy_pass       http://koko:5000;
  33.     proxy_set_header X-Real-IP $remote_addr;
  34.     proxy_set_header Host $host;
  35.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  36.     proxy_http_version 1.1;
  37.     proxy_buffering off;
  38.     proxy_set_header Upgrade $http_upgrade;
  39.     proxy_set_header Connection "upgrade";
  40.   }
  42.   # lion 配置
  43.   location /lion/ {
  44.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  45.     # proxy_pass       http://127.0.0.1:8081;
  46.     proxy_pass http://lion:8081;
  47.     proxy_buffering off;
  48.     proxy_request_buffering off;
  49.     proxy_http_version 1.1;
  50.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  51.     proxy_set_header Upgrade $http_upgrade;
  52.     proxy_set_header Connection $http_connection;
  53.     proxy_ignore_client_abort on;
  54.     proxy_connect_timeout 600;
  55.     proxy_send_timeout 600;
  56.     proxy_read_timeout 600;
  57.     send_timeout 6000;
  58.   }
  60.   # Core 配置
  61.   location /ws/ {
  62.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  63.     # proxy_pass       http://127.0.0.1:8070;
  64.     proxy_pass http://core:8070;
  65.     proxy_set_header X-Real-IP $remote_addr;
  66.     proxy_set_header Host $host;
  67.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  68.     proxy_http_version 1.1;
  69.     proxy_buffering off;
  70.     proxy_set_header Upgrade $http_upgrade;
  71.     proxy_set_header Connection "upgrade";
  72.   }
  74.   location /api/ {
  75.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  76.     # proxy_pass       http://127.0.0.1:8080;
  77.     proxy_pass http://core:8080;
  78.     proxy_set_header X-Real-IP $remote_addr;
  79.     proxy_set_header Host $host;
  80.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  81.   }
  83.   location /core/ {
  84.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  85.     # proxy_pass       http://127.0.0.1:8080;
  86.     proxy_pass http://core:8080;
  87.     proxy_set_header X-Real-IP $remote_addr;
  88.     proxy_set_header Host $host;
  89.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  90.   }
  92.   # 前端 Lina
  93.   location /ui/ {
  94.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  95.     # proxy_pass       http://127.0.0.1:9528;
  96.     proxy_pass http://lina:9528;
  97.     proxy_set_header X-Real-IP $remote_addr;
  98.     proxy_set_header Host $host;
  99.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  100.   }
  102.   location / {
  103.     rewrite ^/(.*)$ /ui/$1 last;
  104.   }
  105. }
  1. server {
  2.   listen 80;
  3.   # server_name _;
  5.   client_max_body_size 5000m; 文件大小限制
  7.   # 前端 Lina
  8.   location /ui/ {
  9.     try_files $uri / /index.html;
  10.     alias /opt/lina-v3.0.1/;
  11.     expires 24h;
  12.   }
  14.   # Luna 配置
  15.   location /luna/ {
  16.     try_files $uri / /index.html;
  17.     alias /opt/luna-v3.0.1/;
  18.     expires 24h;
  19.   }
  21.   # Core data 静态资源
  22.   location /media/replay/ {
  23.     add_header Content-Encoding gzip;
  24.     root /opt/jumpserver-v3.0.1/data/;
  25.   }
  27.   location /media/ {
  28.     root /opt/jumpserver-v3.0.1/data/;
  29.   }
  31.   location /static/ {
  32.     root /opt/jumpserver-v3.0.1/data/;
  33.     expires 24h;
  34.   }
  36.   # KoKo Lion 配置
  37.   location /koko/ {
  38.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  39.     # proxy_pass       http://127.0.0.1:5000;
  40.     proxy_pass       http://koko:5000;
  41.     proxy_set_header X-Real-IP $remote_addr;
  42.     proxy_set_header Host $host;
  43.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  44.     proxy_http_version 1.1;
  45.     proxy_buffering off;
  46.     proxy_set_header Upgrade $http_upgrade;
  47.     proxy_set_header Connection "upgrade";
  48.   }
  50.   # lion 配置
  51.   location /lion/ {
  52.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  53.     # proxy_pass       http://127.0.0.1:8081;
  54.     proxy_pass http://lion:8081;
  55.     proxy_buffering off;
  56.     proxy_request_buffering off;
  57.     proxy_http_version 1.1;
  58.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  59.     proxy_set_header Upgrade $http_upgrade;
  60.     proxy_set_header Connection $http_connection;
  61.     proxy_ignore_client_abort on;
  62.     proxy_connect_timeout 600;
  63.     proxy_send_timeout 600;
  64.     proxy_read_timeout 600;
  65.     send_timeout 6000;
  66.   }
  68.   # Core 配置
  69.   location /ws/ {
  70.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  71.     # proxy_pass       http://127.0.0.1:8070;
  72.     proxy_pass http://core:8070;
  73.     proxy_set_header X-Real-IP $remote_addr;
  74.     proxy_set_header Host $host;
  75.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  76.     proxy_http_version 1.1;
  77.     proxy_buffering off;
  78.     proxy_set_header Upgrade $http_upgrade;
  79.     proxy_set_header Connection "upgrade";
  80.   }
  82.   location /api/ {
  83.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  84.     # proxy_pass       http://127.0.0.1:8080;
  85.     proxy_pass http://core:8080;
  86.     proxy_set_header X-Real-IP $remote_addr;
  87.     proxy_set_header Host $host;
  88.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  89.   }
  91.   location /core/ {
  92.     # 注意将模板中的组件名称替换为服务实际 ip 地址， 如都在本机部署
  93.     # proxy_pass       http://127.0.0.1:8080;
  94.     proxy_pass http://core:8080;
  95.     proxy_set_header X-Real-IP $remote_addr;
  96.     proxy_set_header Host $host;
  97.     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  98.   }
  100.   location / {
  101.     rewrite ^/(.*)$ /ui/$1 last;
  102.   }
  103. }
  1. nginx -t
  1. nginx -s reload