<p>출처1 :&nbsp;<a href="https://serverfault.com/questions/562756/how-to-remove-the-path-with-an-nginx-proxy-pass" target="_blank">https://serverfault.com/questions/562756/how-to-remove-the-path-with-an-nginx-proxy-pass</a></p><p>출처2 :&nbsp;<a href="https://stackoverflow.com/questions/23948527/13-permission-denied-while-connecting-to-upstreamnginx" target="_blank">https://stackoverflow.com/questions/23948527/13-permission-denied-while-connecting-to-upstreamnginx</a></p><p><br></p><h3>1. 기본 설정파일 삭제(default.conf)</h3><p>nginx를 설치했다면 /etc/nginx/conf.d/default.conf 라는 파일이 있는데 이걸 삭제함</p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;">rm&nbsp;-f&nbsp;/etc/nginx/conf.d/default.conf</div><p><br></p><p><br></p><h3>2. nginx.conf 수정</h3><p>/etc/nginx/nginx.conf 라는 파일이 있는데 이것으로만 설정을 할 예정<br></p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;">vi&nbsp;/etc/nginx/nginx.conf</div><p><br></p><p>최종 목표는 http://x.x.x.x/nwkim 로&nbsp;접속하면 http://y.y.y.y 로 보내는 것</p><p><br></p><p>기타 잡다한 설정등이 있지만 중요한 것만 집고 가자.</p><p>upstream은 목적지 이다. 위에 주소로 보면 y.y.y.y</p><p>server 속성의 location을 보면&nbsp;</p><p>/nwkim&nbsp;</p><p>/nwkim/</p><p>두 가지가 있는데, 이는 포워딩하면서 nwkim은 없는 효과를 주기 위해서 설정한 것이다.&nbsp;</p><p><br></p><p>만약 /nwkim 을 포함한 채로 포워딩을 하고 싶다면 다음과 같이 하나만 설정하면 된다.</p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;/nwkim&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://nwkim;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;off;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;Host&nbsp;<span style="color: #9cdcfe;">$host</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;X-Real-IP&nbsp;<span style="color: #9cdcfe;">$remote_addr</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;X-Forwarded-For&nbsp;<span style="color: #9cdcfe;">$proxy_add_x_forwarded_for</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;Authorization&nbsp;<span style="color: #9cdcfe;">$http_authorization</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass_header&nbsp;&nbsp;Authorization;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div></div><p><br></p><p><br></p><p>최종 목표의 결과물</p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><div><span style="color: #6a9955;">#&nbsp;nginx.conf</span></div><br><div>user&nbsp;&nbsp;nginx;</div><div>worker_processes&nbsp;&nbsp;1;</div><br><div>error_log&nbsp;&nbsp;/var/log/nginx/error.log&nbsp;warn;</div><div>pid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/var/run/nginx.pid;</div><br><br><div>events&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;worker_connections&nbsp;&nbsp;1024;</div><div>}</div><br><br><div>http&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/etc/nginx/mime.types;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;default_type&nbsp;&nbsp;application/octet-stream;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#&nbsp;이동할&nbsp;대상</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;upstream&nbsp;nwkim&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server&nbsp;10.2.10.65:8080&nbsp;max_fails=3&nbsp;fail_timeout=2s;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;keepalive&nbsp;1024;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;keepalive_requests&nbsp;10240;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;keepalive_timeout&nbsp;120;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><div>&nbsp;&nbsp;&nbsp;&nbsp;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;server&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;listen&nbsp;80;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server_name&nbsp;localhost;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;charset&nbsp;utf-8;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;client_max_body_size&nbsp;1G;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#&nbsp;nwkim&nbsp;이라는&nbsp;주소를&nbsp;없애주기&nbsp;위해서&nbsp;location을&nbsp;두&nbsp;개&nbsp;설정하고&nbsp;하나는&nbsp;리다이렉트&nbsp;시킨다</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;/nwkim&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #c586c0;">return</span>&nbsp;302&nbsp;/nwkim/;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;location&nbsp;/nwkim/&nbsp;{</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://nwkim/;&nbsp;<span style="color: #6a9955;">#&nbsp;마지막에&nbsp;/를&nbsp;꼭&nbsp;써주어야&nbsp;정상적으로&nbsp;포워딩&nbsp;됨</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_redirect&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;off;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;Host&nbsp;<span style="color: #9cdcfe;">$host</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;X-Real-IP&nbsp;<span style="color: #9cdcfe;">$remote_addr</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;X-Forwarded-For&nbsp;<span style="color: #9cdcfe;">$proxy_add_x_forwarded_for</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_set_header&nbsp;&nbsp;&nbsp;Authorization&nbsp;<span style="color: #9cdcfe;">$http_authorization</span>;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;proxy_pass_header&nbsp;&nbsp;Authorization;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#&nbsp;혹시나&nbsp;링크&nbsp;주소가&nbsp;절대경로&nbsp;/&nbsp;로&nbsp;시작해서&nbsp;링크를&nbsp;눌렀을&nbsp;때&nbsp;깨진다면&nbsp;sub_filter&nbsp;사용가능</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#&nbsp;하지만&nbsp;정규식은&nbsp;사용되지&nbsp;않음&nbsp;정규식은&nbsp;subs_filter를&nbsp;사용한다고&nbsp;함</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;sub_filter_types&nbsp;*;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;sub_filter_once&nbsp;off;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;sub_filter&nbsp;href=<span style="color: #ce9178;">"/&nbsp;href="</span>/nwkim/;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;sub_filter&nbsp;href=<span style="color: #ce9178;">'/&nbsp;href='</span>/nwkim/;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}</div><div>&nbsp;&nbsp;&nbsp;&nbsp;}</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;log_format&nbsp;&nbsp;main&nbsp;&nbsp;<span style="color: #ce9178;">'$remote_addr&nbsp;-&nbsp;$remote_user&nbsp;[$time_local]&nbsp;"$request"&nbsp;'</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #ce9178;">'$status&nbsp;$body_bytes_sent&nbsp;"$http_referer"&nbsp;'</span></div><div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #ce9178;">'"$http_user_agent"&nbsp;"$http_x_forwarded_for"'</span>;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;access_log&nbsp;&nbsp;/var/log/nginx/access.log&nbsp;&nbsp;main;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;sendfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;on;</div><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#tcp_nopush&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;on;</span></div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;keepalive_timeout&nbsp;&nbsp;65;</div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;<span style="color: #6a9955;">#gzip&nbsp;&nbsp;on;</span></div><br><div>&nbsp;&nbsp;&nbsp;&nbsp;include&nbsp;/etc/nginx/conf.d/*.conf;</div><div>}</div></div><p><br></p><p><br></p><p><br></p><h3>3. SELinux 설정</h3><p>2번까지 모든 설정을 맞추었는데 502 에러가 나면서 설정이 제대로 되지 않았다면 에러로그를 확인해보자.</p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;">tail&nbsp;-n&nbsp;20&nbsp;/var/log/nginx/error.log</div><p><br></p><p>다음과 같이 permission 이 없다는 오류메시지가 나오면&nbsp;</p><div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><div>2020/11/23&nbsp;10:41:34&nbsp;[crit]&nbsp;25145#25145:&nbsp;*17&nbsp;<span style="color: #dcdcaa;">connect</span>()&nbsp;to&nbsp;10.2.10.65:8080&nbsp;failed&nbsp;(13:&nbsp;Permission&nbsp;denied)&nbsp;</div><div><span style="color: #c586c0;">while</span>&nbsp;connecting&nbsp;to&nbsp;upstream,&nbsp;client:&nbsp;10.2.10.65,&nbsp;server:&nbsp;localhost,&nbsp;request:&nbsp;<span style="color: #ce9178;">"GET&nbsp;/nwkim/test&nbsp;HTTP/1.1"</span>,&nbsp;upstream:&nbsp;<span style="color: #ce9178;">"http://10.2.10.65:8080/nwkim/test"</span>,&nbsp;host:&nbsp;<span style="color: #ce9178;">"10.2.7.104"</span></div></div><p><br></p><p>아래와 같이 권한을 주자.</p><div style="background-color: rgb(30, 30, 30); font-family: Consolas, &quot;Courier New&quot;, monospace; font-size: 14px; line-height: 19px; white-space: pre;"><span style="color: rgb(212, 212, 212);">setsebool&nbsp;-P&nbsp;httpd_can_network_connect&nbsp;</span><font color="#dcdcaa">1</font></div><p><br></p><p><br></p><p><br></p>

[nginx] 리버스 프록시 설정 reverse proxy