user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    server {
            listen 80;
            server_name 172.16.7.204;
            rewrite ^(.*)$ https://${server_name}$1 permanent;
    }

    server {

            listen       443 ssl http2;

            server_name  dockerhub-primary;

            ssl_certificate     /root/conf/ssl.crt;#配置证书位置

            ssl_certificate_key  /root/conf/server.key;#配置秘钥位置

            #ssl_client_certificate ca.crt;#双向认证

            #ssl_verify_client on; #双向认证

            location /v2/ {
                      proxy_connect_timeout 2s;
                      proxy_read_timeout 600s;
                      proxy_send_timeout 600s;
                      proxy_pass http://localhost:5000/v2/;
                      proxy_set_header Host $host;
                      proxy_set_header X-Real-IP $remote_addr;
                      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            }

            error_page 404 /404.html;
                    location = /404.html {
                    }

                    error_page 500 502 503 504 /50x.html;
                    location = /50x.html {
                    }
    }
}