1
server {
2
    listen 443 ssl;
3
    server_name pve.yourdomain.com;
4

5
    # 你的域名证书
6
    ssl_certificate /path/to/your/cert.pem;
7
    ssl_certificate_key /path/to/your/key.pem;
8

9
    location / {
10
        proxy_pass https://192.168.1.100:8006;
11

12
        # 关键配置：忽略上游证书验证
13
        proxy_ssl_verify off;
14
        proxy_ssl_session_reuse off;
15

16
        # 标准反向代理配置
17
        proxy_set_header Host $host;
18
        proxy_set_header X-Real-IP $remote_addr;
19
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
20
        proxy_set_header X-Forwarded-Proto $scheme;
21

22
        # WebSocket 支持（PVE 控制台需要）
23
        proxy_set_header Upgrade $http_upgrade;
24
        proxy_set_header Connection "upgrade";
25

26
        # 超时设置
27
        proxy_connect_timeout 60s;
28
        proxy_send_timeout 60s;
29
        proxy_read_timeout 60s;
30
    }
31
}

1
pve.yourdomain.com {
2
    reverse_proxy https://pve-server-ip:8006 {
3
        transport http {
4
            tls_insecure_skip_verify
5
        }
6
    }
7
}

1
pve.yourdomain.com {
2
    reverse_proxy https://192.168.1.100:8006 {
3
        transport http {
4
            tls_insecure_skip_verify
5
            # 限制访问来源
6
        }
7
    }
8
    # 添加访问控制
9
    @internal {
10
        remote_ip 192.168.0.0/16 10.0.0.0/8
11
    }
12
    handle @internal {
13
        reverse_proxy https://192.168.1.100:8006 {
14
            transport http {
15
                tls_insecure_skip_verify
16
            }
17
        }
18
    }
19
    respond 403
20
}