Jupyterhub與nginx反向代理在子路徑

我有一臺Ubuntu服務器運行nginx端口443爲Python筆記本服務端口8000上的一些靜態內容和Jupyterhub 0.8（jupyterhub通過pip安裝並作爲服務運行（不與Docker ）。Jupyterhub與nginx反向代理在子路徑

我想用的nginx的反向代理，使作爲子路徑jupyterhub訪問，如example.com/jupyterhub。

繼文檔和其他一些討論（如this one）在這裏，我想出了以下nginx的配置：

server_tokens off; 

server { 
    listen  80; 
    server_name example.com; 
    rewrite ^ https://$server_name$request_uri? permanent; 
} 

server { 
    listen 443 ssl default_server; 
    #listen [::]:80 default_server ipv6only=on; 

    root /var/www/html; 
    index index.php index.html index.htm; 

    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; 
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; 

    # Make site accessible from http://localhost/ 
    server_name localhost; 

    # certs sent to the client in SERVER HELLO are concatenated in 
    ssl_certificate 
    ssl_session_timeout 1d; 
    ssl_session_cache shared:SSL:50m; 
    ssl_session_tickets off; 


    # modern configuration. tweak to your needs. 
    ssl_protocols TLSv1.2; 
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256'; 
    ssl_prefer_server_ciphers on; 

    # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months) 
    add_header Strict-Transport-Security max-age=15768000; 

    # OCSP Stapling --- 
    # fetch OCSP records from URL in ssl_certificate and cache them 
    ssl_stapling on; 
    ssl_stapling_verify on; 

    location /jupyterhub/ { 
    proxy_pass http://localhost:8000; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header Host $host; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-NginX-Proxy true; 

    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    } 

    location/{ 
    try_files $uri $uri/ =404; 
    } 

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 
    location ~ \.php$ { 
    include snippets/fastcgi-php.conf; 
    fastcgi_pass unix:/run/php/php7.0-fpm.sock; 
    } 
}

而且，我設置jupyterhub_conf.py

c.JupyterHub.base_url = u'/jupyterhub' 
c.JupyterHub.ip = '127.0.0.1'

下面當我訪問https://example.com/jupyterhub我得到一個502錯誤。望着nginx的error.log我發現

*13 upstream prematurely closed connection while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: localhost, request: "GET /jupyterhub/ HTTP/1.1", upstream: "http://127.0.0.1:8000/jupyterhub/", host: "example.com"

jupyterhub的地方curl給

$ curl -v http://127.0.0.1:8000/jupyterhub/ 
* Trying 127.0.0.1... 
* TCP_NODELAY set 
* Connected to 127.0.0.1 (127.0.0.1) port 8000 (#0) 
> GET /jupyterhub/ HTTP/1.1 
> Host: 127.0.0.1:8000 
> User-Agent: curl/7.52.1 
> Accept: */* 
> 
* Curl_http_done: called premature == 0 
* Empty reply from server 
* Connection #0 to host 127.0.0.1 left intact 
curl: (52) Empty reply from server

來源

2017-10-12 Pincopallino

你能夠捲曲到'http：//127.0.0.1：8000/jupyterhub /'嗎？ –

@TarunLalwani不，我得到'curl：（52）來自服務器的空回覆 – Pincopallino

你使用docker來運行jupyterhub嗎？ –

正如所討論的問題是，你的Jupyter上HTTPS運行，並且使用的是HTTP爲您proxy_pass。您需要在nginx的配置更改下面

location /jupyterhub/ { 
    proxy_pass https://localhost:8000; 
    ...

另外，還要確保沒有尾隨斜線在https://localhost:8000，使/jupyterhub/被作爲URL來proxy_pass的一部分發送。

來源

2017-10-14 09:26:37

Jupyterhub與nginx反向代理在子路徑

回答

相關問題