From 6cc78fee61e08129316b5318ba6c8cf713edea5e Mon Sep 17 00:00:00 2001 From: rad168 <86744795+rad168@users.noreply.github.com> Date: Tue, 6 May 2025 15:33:06 +0800 Subject: [PATCH] Update nginx.conf --- mytv/nginx.conf | 177 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 177 insertions(+) diff --git a/mytv/nginx.conf b/mytv/nginx.conf index a02e18a..5b83145 100644 --- a/mytv/nginx.conf +++ b/mytv/nginx.conf @@ -79,6 +79,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -136,6 +146,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -193,6 +213,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -265,6 +295,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -322,6 +362,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -370,6 +420,73 @@ http { } } + server { + listen 20005; + listen [::]:20005; + server_name cdn.1678520.xyz; # 替换为您的域名 + + # 自定义响应头：缓存命中状态和剩余缓存时间 + add_header X-Cache-Status $upstream_cache_status; + add_header X-Cache-TTL $upstream_http_x_cache_ttl; + + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + + # 代理头设置 + proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 + proxy_set_header Host live.tvfix.org; # 确保请求的 Host 匹配 Cloudflare 配置 + + # SSL 配置 + proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # 指定 SSL 协议 + proxy_ssl_ciphers HIGH:!aNULL:!MD5; # 设置加密套件 + proxy_ssl_verify off; # 忽略上游服务器证书验证 + proxy_ssl_server_name on; + + # 默认缓存配置 + proxy_cache cache_zone; # 使用指定的缓存区域 + proxy_cache_lock on; # 启用缓存锁 + proxy_cache_valid 200 206 5s; # 默认对 200 和 206 状态码缓存 5 秒 + proxy_cache_methods GET HEAD; # 仅缓存 GET 和 HEAD 请求 + proxy_ignore_headers Cache-Control Expires; # 忽略上游响应的缓存控制头 + expires 5s; # 设置浏览器端缓存 5 秒 + + # 默认 location 配置 + location / { + if ($auth_ok = 0) { + return 302 https://cdn.1678520.xyz/403?mytv; + } + + if ($arg_token) { + add_header Set-Cookie "token=$arg_token; Path=/"; + } + + proxy_pass https://live.tvfix.org; # 替换为您的源站地址 + } + + # 针对 .ts 和 .aac 文件的特殊缓存设置 + location ~* \.(ts|webvtt|key)$ { + if ($auth_ok = 0) { + return 302 https://cdn.1678520.xyz/403?mytv; + } + + if ($arg_token) { + add_header Set-Cookie "token=$arg_token; Path=/"; + } + + proxy_pass https://live.tvfix.org; # 替换为您的源站地址 + proxy_cache_valid 200 206 60s; # 缓存 .ts 文件 60 秒 + expires 60s; # 设置浏览器端缓存 60 秒 + } + } + server { listen 20006; listen [::]:20006; @@ -379,6 +496,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -436,6 +563,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -494,6 +631,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -588,6 +735,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -645,6 +802,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理 @@ -701,6 +868,16 @@ http { add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-TTL $upstream_http_x_cache_ttl; + # 屏蔽 Cloudflare 响应头 + proxy_hide_header Server; + proxy_hide_header CF-Cache-Status; + proxy_hide_header CF-Ray; + proxy_hide_header Alt-Svc; + proxy_hide_header Expect-CT; + proxy_hide_header report-to; + proxy_hide_header Nel; + proxy_hide_header server-timing; + # 代理头设置 proxy_set_header X-Real-IP $remote_addr; # 传递客户端真实 IP proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 支持多级代理