> For AI agents: the complete documentation index is available at https://www.tteam.icu/llms.txt, the full documentation bundle is available at https://www.tteam.icu/llms-full.txt.

# 反向代理DDNS域名

## 背景

网友在家里搭建了一个`Emby`影视站，使用`DDNS`域名进行访问

但是我家的网络、健身房的网络以及流量卡都存在跨网QoS限制，导致访问速度异常缓慢

于是我想到在其网站前通过另一个域名做一层转发，从而实现三网直连

## 正确配置

```nginx
server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  resolver 8.8.8.8 114.114.114.114 valid=10s;
  set $target "xxx";

  location / {
    proxy_pass https://$target:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}
```

## 错误配置

我最初使用了常规的转发方式，发现无法适用于`DDNS`域名:

```nginx
server {
  listen 443 ssl;
  server_name xxx;
  
  ssl_certificate /data/ssl/xxx/fullchain.pem;
  ssl_certificate_key /data/ssl/xxx/privkey.pem;
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

  location / {
    proxy_pass https://xxx:65082;
    proxy_ssl_server_name on;
    proxy_set_header Host xxx;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
  }
}
```