Агальцов Антон
316 lines
14 KiB
HTML
316 lines
14 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="ru-ru">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Настройка VPS как реверс-прокси — docs.a2v.space</title>
|
|
|
|
|
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
|
|
|
|
|
<link rel="stylesheet" href="../../css/custom.css">
|
|
|
|
|
|
</head>
|
|
<body>
|
|
<header class="site-header">
|
|
<nav class="navbar navbar-expand-lg">
|
|
<div class="container-fluid">
|
|
<a class="navbar-brand" href="../../">docs.a2v.space</a>
|
|
|
|
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarMain" aria-controls="navbarMain" aria-expanded="false" aria-label="Toggle navigation">
|
|
<span class="navbar-toggler-icon"></span>
|
|
</button>
|
|
|
|
<div class="collapse navbar-collapse" id="navbarMain">
|
|
<ul class="navbar-nav me-auto mb-2 mb-lg-0">
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../../diary/">Дневник</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../../kb/">База знаний</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../../plans/">Планы</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../../guides/">Инструкции</a>
|
|
</li>
|
|
|
|
<li class="nav-item">
|
|
<a class="nav-link" href="../../creds/">Креды</a>
|
|
</li>
|
|
|
|
</ul>
|
|
|
|
<form class="d-flex search-form" role="search">
|
|
<input class="form-control me-2" type="search" placeholder="Поиск..." aria-label="Search" id="search-input">
|
|
<button class="btn btn-outline-light" type="submit">Найти</button>
|
|
</form>
|
|
</div>
|
|
|
|
<button class="btn btn-outline-light d-md-none ms-2" type="button" data-bs-toggle="collapse" data-bs-target="#sidebar" aria-expanded="false" aria-controls="sidebar">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" viewBox="0 0 16 16">
|
|
<path fill-rule="evenodd" d="M2.5 12a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5zm0-4a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5zm0-4a.5.5 0 0 1 .5-.5h10a.5.5 0 0 1 0 1H3a.5.5 0 0 1-.5-.5z"/>
|
|
</svg>
|
|
</button>
|
|
</div>
|
|
</nav>
|
|
|
|
|
|
<div id="search-results" class="search-results" style="display: none;">
|
|
<div class="search-results-content">
|
|
<button type="button" class="btn-close float-end" id="close-search"></button>
|
|
<h5>Результаты поиска</h5>
|
|
<ul id="results-list"></ul>
|
|
</div>
|
|
</div>
|
|
</header>
|
|
|
|
|
|
<div class="container-fluid">
|
|
<div class="row">
|
|
|
|
<aside class="col-md-3 col-lg-2 d-md-block sidebar collapse" id="sidebar">
|
|
<div class="sidebar-content">
|
|
|
|
|
|
|
|
<h6>Фильтры</h6>
|
|
<ul class="nav flex-column">
|
|
<li class="nav-item"><a class="nav-link" href="../../guides/">Все инструкции</a></li>
|
|
</ul>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h6 class="mt-3">Теги</h6>
|
|
<ul class="nav flex-column">
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/audit/">audit</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/leadera/">leadera</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/security/">security</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/ux/">ux</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/ssh/">ssh</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/tunnel/">tunnel</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/vps/">vps</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/reverse-proxy/">reverse-proxy</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/nginx/">nginx</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/devops/">devops</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/openclaw/">openclaw</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/opencode/">opencode</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/angular/">angular</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/go/">go</a></li>
|
|
|
|
<li class="nav-item"><a class="nav-link" href="../../tags/docker/">docker</a></li>
|
|
|
|
</ul>
|
|
|
|
|
|
|
|
</div>
|
|
|
|
</aside>
|
|
|
|
|
|
<main class="col-md-9 col-lg-10 main-content">
|
|
|
|
<div class="article-content">
|
|
<h1>Настройка VPS как реверс-прокси</h1>
|
|
|
|
|
|
<div class="tags mb-3">
|
|
|
|
<a href="../../tags/vps/" class="tag">vps</a>
|
|
|
|
<a href="../../tags/nginx/" class="tag">nginx</a>
|
|
|
|
<a href="../../tags/ssh/" class="tag">ssh</a>
|
|
|
|
<a href="../../tags/reverse-proxy/" class="tag">reverse-proxy</a>
|
|
|
|
<a href="../../tags/devops/" class="tag">devops</a>
|
|
|
|
</div>
|
|
|
|
|
|
<h2 id="общая-схема">Общая схема</h2>
|
|
<pre tabindex="0"><code>Mac Studio (локальная сеть)
|
|
→ autossh (SSH-туннели)
|
|
→ VPS 95.163.232.9 (Debian)
|
|
→ nginx (HTTPS reverse proxy)
|
|
→ интернет
|
|
</code></pre><h2 id="что-нужно-на-vps">Что нужно на VPS</h2>
|
|
<h3 id="1-установленные-пакеты">1. Установленные пакеты</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>apt update
|
|
</span></span><span style="display:flex;"><span>apt install nginx certbot python3-certbot-nginx
|
|
</span></span></code></pre></div><h3 id="2-ssh-доступ">2. SSH-доступ</h3>
|
|
<ul>
|
|
<li>Авторизация только по ключам</li>
|
|
<li>Публичный ключ с Mac Studio добавлен в <code>/root/.ssh/authorized_keys</code></li>
|
|
</ul>
|
|
<h3 id="3-nginx">3. nginx</h3>
|
|
<p>Для каждого домена создать server block:</p>
|
|
<ul>
|
|
<li>HTTP → редирект на HTTPS</li>
|
|
<li>HTTPS с SSL-сертификатом Let’s Encrypt</li>
|
|
<li><code>proxy_pass</code> на localhost-порт туннеля</li>
|
|
</ul>
|
|
<p>Пример структуры:</p>
|
|
<pre tabindex="0"><code>/etc/nginx/sites-available/
|
|
claw.a2v.space.conf
|
|
code.a2v.space.conf
|
|
sand.a2v.space.conf
|
|
</code></pre><h3 id="4-ssl-сертификаты">4. SSL-сертификаты</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>certbot certonly --nginx -d <domain>
|
|
</span></span><span style="display:flex;"><span>certbot renew --dry-run <span style="color:#75715e"># проверить автообновление</span>
|
|
</span></span></code></pre></div><h2 id="что-нужно-на-mac-studio">Что нужно на Mac Studio</h2>
|
|
<h3 id="autossh-через-launchd">autossh через launchd</h3>
|
|
<p>Plist: <code>~/Library/LaunchAgents/com.openclaw.sshtunnel.plist</code></p>
|
|
<p>Один plist с несколькими <code>-R</code> флагами:</p>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-xml" data-lang="xml"><span style="display:flex;"><span><span style="color:#f92672"><key></span>ProgramArguments<span style="color:#f92672"></key></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"><array></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>/usr/local/bin/autossh<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-M<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>0<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-R<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>8080:localhost:18789<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-R<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>8081:localhost:4096<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-R<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>8082:localhost:4200<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-R<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>8083:localhost:8080<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>root@95.163.232.9<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-N<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>-i<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span> <span style="color:#f92672"><string></span>/Users/<span style="color:#f92672"><user></span>/.ssh/id_rsa<span style="color:#f92672"></string></span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#f92672"></array></span>
|
|
</span></span></code></pre></div><h3 id="управление-launchd">Управление launchd</h3>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>launchctl load ~/Library/LaunchAgents/com.openclaw.sshtunnel.plist
|
|
</span></span><span style="display:flex;"><span>launchctl start com.openclaw.sshtunnel
|
|
</span></span><span style="display:flex;"><span>launchctl stop com.openclaw.sshtunnel
|
|
</span></span></code></pre></div><h2 id="проверка">Проверка</h2>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#75715e"># На VPS</span>
|
|
</span></span><span style="display:flex;"><span>ss -tlnp | grep -E <span style="color:#e6db74">'808[0-3]'</span>
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span><span style="color:#75715e"># Снаружи</span>
|
|
</span></span><span style="display:flex;"><span>curl -I https://claw.a2v.space
|
|
</span></span><span style="display:flex;"><span>curl -I https://code.a2v.space
|
|
</span></span><span style="display:flex;"><span>curl -I https://sand.a2v.space
|
|
</span></span></code></pre></div>
|
|
</div>
|
|
|
|
</main>
|
|
</div>
|
|
</div>
|
|
|
|
<footer class="site-footer">
|
|
<div class="container">
|
|
<p class="text-center mb-0">© 2026 docs.a2v.space</p>
|
|
</div>
|
|
</footer>
|
|
|
|
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
|
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/fuse.js@7.0.0/dist/fuse.min.js"></script>
|
|
|
|
|
|
<script src="../../js/search.js"></script>
|
|
<script src="../../js/creds.js"></script>
|
|
|
|
|
|
</body>
|
|
</html>
|