Question

要对乘客使用Nginx的X-Accel-Redirect功能，显然您使用passenger_set_header，如果映射到其他位置，则passenger_set_cgi_param。例如，这是一个configuration which apparently used to work for someone else：

passenger_set_cgi_param HTTP_X_ACCEL_MAPPING "/home/user/rails_app/shared/files/=/documents/";
passenger_pass_header X-Accel-Redirect;

location ~ ^/documents/(\d\d\d)/(\d\d\d)/(\d\d\d)/(.*)$ {
  alias /home/user/rails_app/shared/files/$1/$2/$3/$4;
  internal;
}

但乘客5，他们在release notes中说：

[Nginx] passenger_set_cgi_param选项已被删除由passenger_set_header和passenger_env_var替换。

关于如何将两者结合在一起用于X-Accel-Redirect的信息并不多。没有最新的教程或博客似乎也显示了如何做到这一点。这是怎么做到的？我可以使用以下nginx.conf来为rails开发服务器（非乘客）工作，但它不适用于乘客。

upstream api_server {
   server localhost:5000;
   # (starting passenger with ``` RAILS_ENV=development passenger start -a 127.0.0.1 -p 5000 -d ```) not using unix:socket for a good reason
}

server {
    listen              9000;
    server_name         $host;
    return 301          https://$host:9443$request_uri;
    #error_page 497 https://$host:9443$request_uri;
}

server {
    charset UTF-8;

    server_name  localhost 0.0.0.0;

    root /var/www/html/app;

    listen 9443 ssl;
    ssl on;
    ssl_certificate /opt/nginx/conf/ssl/app.chain.pem;
    ssl_certificate_key /opt/nginx/conf/ssl/app.key.pem;

    error_page 497 https://$host:9443$request_uri;

    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Credentials' 'true';
    add_header 'Access-Control-Expose-Headers' 'Content-Length, Content-Type, Keep-Alive, Date, Server, Transfer-Encoding, Cache-Control';
    add_header 'Access-Control-Allow-Headers' 'Content-Length, Content-Type, Keep-Alive, Date, Server, Transfer-Encoding, Cache-Control';


    passenger_env_var X-Sendfile-Type "X-Accel-Redirect";
    passenger_env_var X-Accel-Mapping  "/special/place/on/filesystem/=/protected_files/";
    passenger_pass_header X-Accel-Redirect;
    passenger_pass_header X-Sendfile-Type;


    # --------- Serve static applications --------

    location / {
        try_files $uri $uri/ /index.html;
    }


    # --------- API --------

    location /protected_files/{
        # Used for X-Accel-Redirect
        internal;
        add_header Pragma "no-cache";
        alias /special/place/on/filesystem/;
    }

    location ~ /(api|auth|raw)/ {

        # Host + forwarding headers
            proxy_set_header  Host              $http_host;
            proxy_set_header  X-Real-IP         $remote_addr;
            proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;

                        passenger_pass_header Host;
                        passenger_pass_header X-Real-IP;
                        passenger_pass_header X-Forwarded-For;


        # Configuration for X-Sendfile style fast & authenticated static serving
              proxy_set_header  X-Sendfile-Type   X-Accel-Redirect;
                          # proxy_set_header  X-Accel-Mapping   /mounts/test_data_filesystem/=/protected_files/;
              proxy_set_header  X-Accel-Mapping   /special/place/on/filesystem/=/protected_files/;

              passenger_env_var X-Sendfile-Type "X-Accel-Redirect";
              passenger_env_var X-Accel-Mapping  "/special/place/on/filesystem/=/protected_files/";
              passenger_pass_header X-Accel-Redirect;
              passenger_pass_header X-Sendfile-Type;


        proxy_pass http://api_server;
    }

Answer 1

看起来你找到了一个替代解决方案，但发布此解决方案以防其他人遇到同样的问题，并希望从乘客4语法升级到乘客5以及X-Accel-Redirect。

以下是对我有用的更改：

Passenger 4版本：

passenger_set_cgi_param HTTP_X_ACCEL_MAPPING /path/to/railsapp/public/=/storage/;
passenger_pass_header X-Accel-Redirect;

location /storage {
  root /var/www/shared;
  internal;
}

Passenger 5版本：

passenger_set_header X-Sendfile-Type "X-Accel-Redirect";
passenger_env_var HTTP_X_ACCEL_MAPPING /path/to/railsapp/public/=/storage/;
passenger_pass_header X-Accel-Redirect;

location /storage {
  root /var/www/shared;
  internal;
}

此外，/var/www/shared，ln -s /path/to/railsapp/public /var/www/shared/storage中有一个指向rails应用的符号链接，但根据您的nginx配置，这可能会有所不同。

希望这有帮助！

乘客5 Nginx X-Accel-Redirect

1 个答案: