guacamole 实战二（使用nginx反向代理为https）-CFANZ编程社区

guacamole 实战二（使用nginx反向代理为https）

安装nginx


yum install -y epel-release gcc gcc-c++ autoconf automake make
yum install -y pcre pcre-devel
yum install -y zlib zlib-devel
yum install -y pcre  pcre-devel zlib  zlib-devel openssl openssl-devel
yum install -y nginx-all-modules.noarch

wget https://nginx.org/download/nginx-1.23.1.tar.gz
tar zxvf nginx-1.23.1.tar.gz
cd nginx-1.23.1
./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-stream
make && make install

cd /lib/systemd/system/
vim nginx.service

[Unit]
Description=nginx
After=network.target

[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx reload
ExecStop=/usr/local/nginx/sbin/nginx quit
PrivateTmp=true

[Install]
WantedBy=multi-user.target

systemctl enable nginx.service
cd /usr/local/nginx
mkdir cert
mv nginxcert.pem nginxcert.key /usr/local/nginx/cert
/usr/local/nginx/sbin/nginx
systmectl status nginx

修改配置文件


vim /usr/local/nginx/conf/nginx.conf

include /etc/nginx/conf.d/*.conf;

touch /et/nginx/conf.d/guacd_https.conf
vim /et/nginx/conf.d/guacd_https.conf

server {
        listen              443 ssl;
        server_name         hostname.domain.com;
        ssl_certificate         /usr/local/nginx/cert/nginxcert.pem;
        ssl_certificate_key     /usr/local/nginx/cert/nginxcert.key;
        ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers         HIGH:!aNULL:!MD5;
        access_log /var/log/nginx/clu.access.guaca.log;
        error_log /var/log/nginx/clu.error.guaca.log warn;

        location / {
        proxy_pass http://localhost:8080/guacamole/;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        proxy_cookie_path /guacamole/ /;

        }
}

/usr/local/nginx/sbin/nginx -s reload