通过nginx转发解决dsh web限制localhost访问的问题

[gu0o00]

在nginx中添加如下配置文件：

server {
    listen 4080;

    set $dsh_ok 0;
    if ($arg_token = "YOUR_SECRET_TOKEN") {
        set $dsh_ok 1;
    }
    if ($cookie_dsh_token = "YOUR_SECRET_TOKEN") {
        set $dsh_ok 1;
    }
    if ($dsh_ok != 1) {
        return 403 "Access Denied: Invalid or missing token.\n";
    }

    location / {
        add_header Set-Cookie "dsh_token=YOUR_SECRET_TOKEN; Path=/; HttpOnly; SameSite=Lax" always;

        proxy_pass http://127.0.0.1:3080;

        proxy_set_header Host localhost;
        proxy_set_header Origin http://localhost;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $http_host;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400s;
        proxy_send_timeout 86400s;

        proxy_set_header Accept-Encoding "";
        sub_filter_once on;
        sub_filter_types text/html;
        sub_filter '<head>' '<head><script>(function(){if(typeof crypto!=="undefined"&&typeof crypto.randomUUID!=="function"){crypto.randomUUID=function(){var a=new Uint8Array(16);crypto.getRandomValues(a);a[6]=a[6]&15|64;a[8]=a[8]&63|128;var h=Array.from(a,function(b){return b.toString(16).padStart(2,"0")}).join("");return h.slice(0,8)+"-"+h.slice(8,12)+"-"+h.slice(12,16)+"-"+h.slice(16,20)+"-"+h.slice(20)}}})();</script>';
    }
}

测试配置并启动：

sudo nginx -t && sudo systemctl reload nginx

之后通过 http://IP:4080/?token=YOUR_SECRET_TOKEN 即可正常访问

这个方法不动源码，不用插件，有token限制一定程度上避免无限制访问

[aSimpleSheep]

设置->插件页面正常吗？我之前配了之后插件设置项显示不正常

[qtimy]

设置页面默认还有验证，也得去动一下，可以看一下我的云服务器部署版本参考一下

[gu0o00]

正常的

[aSimpleSheep]

正常的

我说的时这个页面，按你的配置还是不显示配置项

[crowbar1957]

我说的时这个页面，按你的配置还是不显示配置项

nginx配置中加上 sub_filter '<head>' '<head><script>window.__DSH_TRANSPORT__={"ownsHost":true}</script>'; 就能正常显示了