::: 警告 使用 SSL 設定時,您必須建立 SSL 證書,否則您的網頁伺服器將無法啟動。在繼續之前,請參閱 Creating SSL Certificates 文件頁面以了解如何建立這些證書。 :::
::: 提示 如果您使用 Caddy With Automatic SSL ,則無需手動建立 SSL 證書,Caddy 會自動處理。 :::
::::: 選項卡 :::: 選項卡“Nginx With SSL” 首先,刪除預設的 NGINX 配置。
rm /etc/nginx/sites-enabled/default
現在,您應該貼上下面文件的內容,將 <domain> 替換為您在名為的文件中使用的域名
pterodactyl.conf 並將檔案放入 /etc/nginx/sites-available/ ,或 — 如果在 RHEL、Rocky Linux 或 AlmaLinux 上,則放入 /etc/nginx/conf.d/ 。
server {
# Replace the example <domain> with your domain name or IP address
listen 80;
server_name <domain>;
return 301 https://$server_name$request_uri;
}
server {
# Replace the example <domain> with your domain name or IP address
listen 443 ssl http2;
server_name <domain>;
root /var/www/pterodactyl/public;
index index.php;
access_log /var/log/nginx/pterodactyl.app-access.log;
error_log /var/log/nginx/pterodactyl.app-error.log error;
# allow larger file uploads and longer script runtimes
client_max_body_size 100m;
client_body_timeout 120s;
sendfile off;
# SSL Configuration - Replace the example <domain> with your domain
ssl_certificate /etc/letsencrypt/live/<domain>/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/<domain>/privkey.pem;
ssl_session_cache shared:SSL:10m;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
ssl_prefer_server_ciphers on;
# See https://hstspreload.org/ before uncommenting the line below.
# add_header Strict-Transport-Security "max-age=15768000; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header Content-Security-Policy "frame-ancestors 'self'";
add_header X-Frame-Options DENY;
add_header Referrer-Policy same-origin;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php/php8.3-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param HTTP_PROXY "";
fastcgi_intercept_errors off;
fastcgi_buffer_size 16k;
fastcgi_buffers 4 16k;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
include /etc/nginx/fastcgi_params;
}
location ~ /\.ht {
deny all;
}
}
最後一步是啟用 NGINX 配置並重新啟動它。
# You do not need to symlink this file if you are using RHEL, Rocky Linux, or AlmaLinux.
sudo ln -s /etc/nginx/sites-available/pterodactyl.conf /etc/nginx/sites-enabled/pterodactyl.conf
# You need to restart nginx regardless of OS.
sudo systemctl restart nginx
:::: :::: 選項卡“不含 SSL 的 Nginx” 首先,刪除預設的 NGINX 配置。
rm /etc/nginx/sites-enabled/default
現在,您應該貼上下面文件的內容,將 <domain> 替換為您在名為的文件中使用的域名
pterodactyl.conf 並將檔案放入 /etc/nginx/sites-available/ ,或 — 如果在 RHEL、Rocky Linux 或 AlmaLinux 上,則放入 /etc/nginx/conf.d/ 。
server {
# Replace the example <domain> with your domain name or IP address
listen 80;
server_name <domain>;
root /var/www/pterodactyl/public;
index index.html index.htm index.php;
charset utf-8;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
access_log off;
error_log /var/log/nginx/pterodactyl.app-error.log error;
# allow larger file uploads and longer script runtimes
client_max_body_size 100m;
client_body_timeout 120s;
sendfile off;
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php/php8.3-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param HTTP_PROXY "";
fastcgi_intercept_errors off;
fastcgi_buffer_size 16k;
fastcgi_buffers 4 16k;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
}
location ~ /\.ht {
deny all;
}
}
最後一步是啟用 NGINX 配置並重新啟動它。
# You do not need to symlink this file if you are using RHEL, Rocky Linux, or AlmaLinux.
sudo ln -s /etc/nginx/sites-available/pterodactyl.conf /etc/nginx/sites-enabled/pterodactyl.conf
# You need to restart nginx regardless of OS.
sudo systemctl restart nginx
:::: :::: 選項卡“Apache With SSL” 首先,刪除預設的 Apache 配置。
a2dissite 000-default.conf
現在,您應該貼上下面文件的內容,將 <domain> 替換為您在名為的文件中使用的域名
pterodactyl.conf 並將檔案放入 /etc/apache2/sites-available ,或 — 如果在 RHEL、Rocky Linux 或 AlmaLinux 上,則放入 /etc/httpd/conf.d/ 。
注意:使用 Apache 時,請確保已安裝了 libapache2-mod-php8.3 軟體包,否則 PHP 將不會顯示在您的網頁伺服器上。
<VirtualHost *:80>
# Replace the example <domain> with your domain name or IP address
ServerName <domain>
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
</VirtualHost>
<VirtualHost *:443>
# Replace the example <domain> with your domain name or IP address
ServerName <domain>
DocumentRoot "/var/www/pterodactyl/public"
AllowEncodedSlashes On
php_value upload_max_filesize 100M
php_value post_max_size 100M
<Directory "/var/www/pterodactyl/public">
Require all granted
AllowOverride all
</Directory>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/<domain>/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/<domain>/privkey.pem
</VirtualHost>
創建上面的文件後,只需運行下面的命令。如果您使用的是 RHEL、Rocky Linux 或 AlmaLinux,則無需執行命令
下面! _您只需要執行 systemctl restart httpd 。
# You do not need to run any of these commands on RHEL, Rocky Linux, or AlmaLinux
sudo ln -s /etc/apache2/sites-available/pterodactyl.conf /etc/apache2/sites-enabled/pterodactyl.conf
sudo a2enmod rewrite
sudo a2enmod ssl
sudo systemctl restart apache2
:::: :::: 選項卡“沒有 SSL 的 Apache” 首先,刪除預設的 Apache 配置。
a2dissite 000-default.conf
現在,您應該貼上下面文件的內容,將 <domain> 替換為您在名為的文件中使用的域名
pterodactyl.conf 並將檔案放入 /etc/apache2/sites-available ,或 — 如果在 RHEL、Rocky Linux 或 AlmaLinux 上,則放入 /etc/httpd/conf.d/ 。
注意:使用 Apache 時,請確保已安裝了 libapache2-mod-php8.3 軟體包,否則 PHP 將不會顯示在您的網頁伺服器上。
<VirtualHost *:80>
# Replace the example <domain> with your domain name or IP address
ServerName <domain>
DocumentRoot "/var/www/pterodactyl/public"
AllowEncodedSlashes On
php_value upload_max_filesize 100M
php_value post_max_size 100M
<Directory "/var/www/pterodactyl/public">
AllowOverride all
Require all granted
</Directory>
</VirtualHost>
創建上面的文件後,只需運行下面的命令。如果您使用的是 RHEL、Rocky Linux 或 AlmaLinux,則無需執行命令
下面! _您只需要執行 systemctl restart httpd 。
# You do not need to run any of these commands on RHEL, Rocky Linux, or AlmaLinux
sudo ln -s /etc/apache2/sites-available/pterodactyl.conf /etc/apache2/sites-enabled/pterodactyl.conf
sudo a2enmod rewrite
sudo systemctl restart apache2
::::
:::: 選項卡“帶有自動 SSL 的 Caddy”
在新增自訂配置之前,我們先刪除預設配置。您可以透過刪除設定檔的內容或完全刪除設定檔然後從頭開始建立一個新檔案來完成此操作。設定檔路徑是 /etc/caddy/Caddyfile 。
若要完全刪除設定文件,請執行以下命令:
rm /etc/caddy/Caddyfile
然後繼續使用您選擇的編輯器來編寫配置。
您應該貼上下面文件的內容,並將 <domain> 替換為您的網域。
{
servers :443 {
timeouts {
read_body 120s
}
}
}
# Replace the example <domain> with your domain name or IP address
<domain> {
root * /var/www/pterodactyl/public
file_server
php_fastcgi unix//run/php/php8.3-fpm.sock {
root /var/www/pterodactyl/public
index index.php
env PHP_VALUE "upload_max_filesize = 100M
post_max_size = 100M"
env HTTP_PROXY ""
env HTTPS "on"
read_timeout 300s
dial_timeout 300s
write_timeout 300s
}
header Strict-Transport-Security "max-age=16768000; preload;"
header X-Content-Type-Options "nosniff"
header X-XSS-Protection "1; mode=block;"
header X-Robots-Tag "none"
header Content-Security-Policy "frame-ancestors 'self'"
header X-Frame-Options "DENY"
header Referrer-Policy "same-origin"
request_body {
max_size 100m
}
respond /.ht* 403
log {
output file /var/log/caddy/pterodactyl.log {
roll_size 100MiB
roll_keep_for 7d
}
level INFO
}
}::: 提示 如果您在代理模式下使用 Cloudflare DNS,請參閱 this tutorial,了解如何設定 Caddy 以使用 DNS 質詢來取得 SSL 憑證。 :::
最後一步是重新啟動 Caddy。
systemctl restart caddy
::::
:::: 選項卡“沒有 SSL 的 Caddy”
在新增自訂配置之前,我們先刪除預設配置。您可以透過刪除設定檔的內容或完全刪除設定檔然後從頭開始建立一個新檔案來完成此操作。設定檔路徑是 /etc/caddy/Caddyfile 。
若要完全刪除設定文件,請執行以下命令:
rm /etc/caddy/Caddyfile
然後繼續使用您選擇的編輯器來編寫配置。
您應該貼上下面文件的內容,並將 <domain> 替換為您的網域。
唯一的兩個差異是我們在 <domain> 後面新增了 :80 後綴,並且在 servers 指令的全域配置中,我們已將連接埠從 :443 變更為 :80 。
{
servers :80 {
timeouts {
read_body 120s
}
}
}
# Replace the example <domain> with your domain name or IP address
<domain>:80 {
root * /var/www/pterodactyl/public
file_server
php_fastcgi unix//run/php/php8.3-fpm.sock {
root /var/www/pterodactyl/public
index index.php
env PHP_VALUE "upload_max_filesize = 100M
post_max_size = 100M"
env HTTP_PROXY ""
# env HTTPS "on" # IMPORTANT: this is commented out, to disable HTTPS
read_timeout 300s
dial_timeout 300s
write_timeout 300s
}
header Strict-Transport-Security "max-age=16768000; preload;"
header X-Content-Type-Options "nosniff"
header X-XSS-Protection "1; mode=block;"
header X-Robots-Tag "none"
header Content-Security-Policy "frame-ancestors 'self'"
header X-Frame-Options "DENY"
header Referrer-Policy "same-origin"
request_body {
max_size 100m
}
respond /.ht* 403
log {
output file /var/log/caddy/pterodactyl.log {
roll_size 100MiB
roll_keep_for 7d
}
level INFO
}
}最後一步是重新啟動 Caddy。
systemctl restart caddy
:::: ::::