@friendsa #19

公网 nginx 配置：/etc/nginx/sites-enabled/home-pve.conf

```
server {
listen 80;
server_name pve.example.com;
server_tokens off;
rewrite ^ https://$http_host$request_uri? permanent;

error_page 404 /404.html;
location = /40x.html {
}

error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}

server
{
listen 443 ssl http2;
server_name pve.example.com;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_ssl_server_name on;
#ssl on;
server_tokens off;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
# ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;


add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";

# Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits
# ssl_dhparam /etc/nginx/dhparam.pem;


#SSL-END

#ERROR-PAGE-START 错误页配置，可以注释、删除或修改
error_page 404 /404.html;
error_page 502 /502.html;
location / {
proxy_pass http://127.0.0.1:81; // 这里的 81 端口是 frps 的 vhost_http_port 配置项
proxy_set_header Host $host:$server_port;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_read_timeout 1200s;
proxy_ssl_server_name on;
proxy_set_header X-Forwarded-Proto $scheme;

# used for view/edit office file via Office Online Server
client_max_body_size 64m;

#access_log /var/log/nginx/pve.access.log;
#error_log /var/log/nginx/pve.error.log;
}

access_log /var/log/nginx/pve.access.log;
error_log /var/log/nginx/pve.error.log;
}
```