使用 nginx 反代 rsync

用于前端的 nginx 将 rsync/rsync-ssl 反代给后端真实的 rsync 服务，通过 proxy protocol 传递客户端真实IP。

stream {

    server {
        listen 873;
        proxy_pass 192.168.10.10:873;
        proxy_protocol on;
        proxy_timeout 1m;
        proxy_connect_timeout 5s;
    }

    server {
        listen 874 ssl;
        listen [::]:874 ssl;
   
	ssl_certificate ssl/yaoge123_com-ecc.crt;
        ssl_certificate_key ssl/yaoge123_com-ecc.key;
        ssl_certificate ssl/yaoge123_com-rsa.crt;
        ssl_certificate_key ssl/yaoge123_com-rsa.key;

	ssl_session_timeout 1d;
        ssl_session_cache shared:rsyncSSL:10m;

	ssl_dhparam ssl/dhparam.pem;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ecdh_curve X25519:prime256v1:secp384r1;
        ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
        ssl_prefer_server_ciphers off;

        ssl_stapling on;
        ssl_stapling_verify on;

        proxy_pass 192.168.10.10:873;
        proxy_protocol on;
        proxy_timeout 1m;
        proxy_connect_timeout 5s;
    }
}