【玩转Lighthouse】搞了一个浏览器版VS Code Server

curl -fsSL https://code-server.dev/install.sh | sh

bind-addr: 127.0.0.1:32000
auth: none
cert: false

sudo systemctl enable --now code-server@$USER

sudo apt-get install nginx

server {
    listen 443 ssl http2 default_server;
    listen [::]:443;
    server_name code.smart-lifestyle.cn;
    ssl_certificate /etc/nginx/ssl/full_chain.pem;
    ssl_certificate_key /etc/nginx/ssl/private.key;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;


    location / {
        proxy_pass http://127.0.0.1:32000/;
      	proxy_set_header Host $host;
      	proxy_set_header Upgrade $http_upgrade;
      	proxy_set_header Connection upgrade;
      	proxy_set_header Accept-Encoding gzip;
    }
}

# 此处才是加code-server配置加入到nginx配置中
sudo ln -s /etc/nginx/sites-available/code-server.https.conf /etc/nginx/sites-enabled/code-server

# 重新加载配置文件
sudo nginx -s reload

curl https://service-oll9qkj1-1258647687-in.bj.apigw.tencentcs.com:9003/release/

server {
    listen 443 ssl http2 default_server;
    listen [::]:443;
    server_name _;
    ssl_certificate /etc/nginx/ssl/full_chain.pem;
    ssl_certificate_key /etc/nginx/ssl/private.key;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 10m;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    location /oauth2/ {
      	proxy_pass       http://service-oll9qkj1-1258647687-in.bj.apigw.tencentcs.com:8003;
      	proxy_set_header Host                    $proxy_host;
      	proxy_set_header X-Real-IP               $remote_addr;
      	proxy_set_header X-Scheme                $scheme;
      	proxy_set_header X-Auth-Request-Redirect $request_uri;
      	# or, if you are handling multiple domains:
      	# proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
    }
    location = /oauth2/auth {
      	proxy_pass       http://service-oll9qkj1-1258647687-in.bj.apigw.tencentcs.com:8003;
      	proxy_set_header Host             $proxy_host;
      	proxy_set_header X-Real-IP        $remote_addr;
      	proxy_set_header X-Scheme         $scheme;
      	# nginx auth_request includes headers but not body
      	proxy_set_header Content-Length   "";
     	proxy_pass_request_body           off;
    }

    location / {
     	auth_request /oauth2/auth;
    	error_page 401 = /oauth2/sign_in;

    	# pass information via X-User and X-Email headers to backend,
    	# requires running with --set-xauthrequest flag
    	auth_request_set $user   $upstream_http_x_auth_request_user;
    	auth_request_set $email  $upstream_http_x_auth_request_email;
    	proxy_set_header X-User  $user;
    	proxy_set_header X-Email $email;

    	# if you enabled --pass-access-token, this will pass the token to the backend
    	auth_request_set $token  $upstream_http_x_auth_request_access_token;
    	proxy_set_header X-Access-Token $token;
      	# if you enabled --cookie-refresh, this is needed for it to work with auth_request
    	auth_request_set $auth_cookie $upstream_http_set_cookie;
    	add_header Set-Cookie $auth_cookie;

    	# When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    	# limit and so the OAuth2 Proxy splits these into multiple parts.
    	# Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    	# so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    	auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    	# Extract the Cookie attributes from the first Set-Cookie header and append them
    	# to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    	if ($auth_cookie ~* "(; .*)") {
            set $auth_cookie_name_0 $auth_cookie;
            set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    	}

	# Send both Set-Cookie headers now if there was a second part
    	if ($auth_cookie_name_upstream_1) {
    	    add_header Set-Cookie $auth_cookie_name_0;
    	    add_header Set-Cookie $auth_cookie_name_1;
   	}

        proxy_pass http://127.0.0.1:32000/;
      	proxy_set_header Host $host;
      	proxy_set_header Upgrade $http_upgrade;
      	proxy_set_header Connection upgrade;
      	proxy_set_header Accept-Encoding gzip;
    }
}