Trilum 反代共享笔记树

V0.102.0#

应用更新之后共享页面侧边栏不显示图标，现已修复，使用以下配置。

server {
    listen 443 ssl http2;
    server_name docs.isrv.cn;

    ssl_certificate /www/sites/docs.isrv.cn/ssl/fullchain.pem;
    ssl_certificate_key /www/sites/docs.isrv.cn/ssl/privkey.pem;

    # -----------------------
    # 首页
    # -----------------------
    location = / {
        proxy_pass http://127.0.0.1:10001/share/library;
        proxy_http_version 1.1;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port 443;

        proxy_buffering off;
    }

    # -----------------------
    # Share 主路径
    # -----------------------
    location / {
        proxy_pass http://127.0.0.1:10001/share/;
        proxy_http_version 1.1;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port 443;

        proxy_buffering off;
    }

    # -----------------------
    # 字体专用修复（移动端关键）
    # -----------------------
    location ~* \.(woff|woff2|ttf|eot|otf)$ {
        proxy_pass http://127.0.0.1:10001;
        proxy_http_version 1.1;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port 443;

        add_header Access-Control-Allow-Origin * always;

        types {
            font/woff woff;
            font/woff2 woff2;
        }
    }

    # -----------------------
    # 安全优化
    # -----------------------
    add_header X-Frame-Options SAMEORIGIN always;
    add_header X-Content-Type-Options nosniff always;
    add_header Referrer-Policy strict-origin-when-cross-origin always;
}

V0.101.3及之前#

server {
    listen 443 ssl http2 ; 
    listen 80 ; 
    server_name docs.isrv.cn; 
    ssl_certificate /www/sites/p1.isrv.cn/ssl/fullchain.pem; 
    ssl_certificate_key /www/sites/p1.isrv.cn/ssl/privkey.pem; 
    # 首页特殊映射 → /share/server
    location = / {
        proxy_pass http://127.0.0.1:40172/share/notes; 
        proxy_set_header Host $host; 
        proxy_set_header X-Real-IP $remote_addr; 
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
        proxy_set_header X-Forwarded-Proto $scheme; 
    }
    # 所有其它路径 → /share/<原路径>
    location / {
        proxy_pass http://127.0.0.1:40172/share$request_uri; 
        proxy_set_header Host $host; 
        proxy_set_header X-Real-IP $remote_addr; 
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
        proxy_set_header X-Forwarded-Proto $scheme; 
    }
}
server {
    listen 80 ; 
    server_name docs.isrv.cn; 
    # 访问 http://srv.isrv.cn 自动跳转到 https://srv.isrv.cn
    return 301 https://$host$request_uri; 
}