From ba361eb5b80af55b54f64d67f1b66c97a71c340d Mon Sep 17 00:00:00 2001 From: dekun Date: Tue, 16 Jun 2026 10:28:00 +0800 Subject: [PATCH] fix: prevent [No Host] panel errors behind CDN or missing Host header Force nginx to pass the domain as Host, add PANEL_DOMAIN fallback in Flask, and document that the admin panel must be accessed over HTTP not HTTPS. Co-authored-by: Cursor --- docs/DEPLOY.md | 2 +- docs/troubleshooting.md | 29 +++++++++++++++++++++++++++++ panel/app.py | 25 ++++++++++++++++++++++++- scripts/install.sh | 1 + server/nginx/acme.conf.template | 3 ++- 5 files changed, 57 insertions(+), 3 deletions(-) diff --git a/docs/DEPLOY.md b/docs/DEPLOY.md index 97ee201..1447ec0 100644 --- a/docs/DEPLOY.md +++ b/docs/DEPLOY.md @@ -6,7 +6,7 @@ |------|-----| | VPS IP | `47.76.87.111` | | 域名 | `66.hyf2.cc` | -| 管理面板 | `http://66.hyf2.cc//` | +| 管理面板 | `http://66.hyf2.cc//`（**必须 http，不要用 https**） | | 部署目录 | `/opt/jiedian` | | 系统 | Ubuntu 22.04 / 24.04 | diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md index 54ea3c4..8ec0843 100644 --- a/docs/troubleshooting.md +++ b/docs/troubleshooting.md @@ -36,6 +36,8 @@ curl -I "http://66.hyf2.cc/$(grep ^PANEL_PATH= /opt/jiedian/.env | cut -d= -f2)/ ``` > 443 端口已被 sing-box Reality 占用，面板走 80 端口子路径。请妥善保管 `PANEL_PATH`，相当于隐藏入口。 +> +> **必须用 `http://` 访问，不要用 `https://`。** 443 不是 Web 面板，用 HTTPS 会报错或出现 `Invalid URL / [No Host]`。 面板可查看每个节点的 **在线状态、连接数、实时速率、累计流量**（数据来自 sing-box Clash API，仅监听 127.0.0.1）。 @@ -45,6 +47,33 @@ curl -I "http://66.hyf2.cc/$(grep ^PANEL_PATH= /opt/jiedian/.env | cut -d= -f2)/ ## 常见问题 +### 面板报 Invalid URL / [No Host] + +**原因**：用了 `https://域名/面板路径/` 访问，或域名开了 CDN 加速但回源 Host 未配置。 + +- 443 端口是 **sing-box Reality**，不是 Web 面板 +- 面板地址必须是：**`http://66.hyf2.cc/jiedian-xxxx/`**（注意是 **http**） + +**处理**： + +```bash +# 1. 用 HTTP 打开（把 jiedian-xxxx 换成你的 PANEL_PATH） +http://66.hyf2.cc/jiedian-xxxx/ + +# 2. VPS 上更新 nginx 与面板（修复 Host 头） +cd /opt/jiedian +git pull +sed -e "s|__DOMAIN__|$(grep ^DOMAIN= .env | cut -d= -f2)|g" \ + -e "s|__PANEL_LOCATION__|/$(grep ^PANEL_PATH= .env | cut -d= -f2)/|g" \ + -e "s|__PANEL_PREFIX__|/$(grep ^PANEL_PATH= .env | cut -d= -f2)|g" \ + -e "s|__PANEL_ALLOW__||g" \ + server/nginx/acme.conf.template > /etc/nginx/sites-available/acme +nginx -t && systemctl reload nginx +systemctl restart jiedian-panel +``` + +若域名在阿里云/Cloudflare 开了 **CDN 代理**，建议对管理域名 **关闭 CDN**（仅 DNS 解析到 VPS），否则 80 端口回源也可能异常。 + ### sing-box 报错 v2ray api is not included in this build GitHub 下载的官方 sing-box **默认不带** `v2ray_api` 模块。若配置里写了 `experimental.v2ray_api`，启动时会直接失败： diff --git a/panel/app.py b/panel/app.py index 0f13f1c..c973b8f 100644 --- a/panel/app.py +++ b/panel/app.py @@ -47,9 +47,32 @@ app.config.update( ) _panel_path = os.environ.get("PANEL_PATH", "").strip().strip("/") +_panel_domain = os.environ.get("PANEL_DOMAIN", "").strip() if _panel_path: app.config["SESSION_COOKIE_PATH"] = f"/{_panel_path}/" - app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_prefix=1) + app.config["PREFERRED_URL_SCHEME"] = "http" + app.wsgi_app = ProxyFix( + app.wsgi_app, x_for=1, x_proto=1, x_host=0, x_prefix=1 + ) + + +class _PanelHostMiddleware: + """CDN/反代未传 Host 时，避免重定向到 http://[No Host]/...。""" + + def __init__(self, app, domain: str): + self.app = app + self.domain = domain + + def __call__(self, environ, start_response): + if self.domain and not environ.get("HTTP_HOST"): + environ["HTTP_HOST"] = self.domain + if not environ.get("HTTP_X_FORWARDED_PROTO"): + environ["HTTP_X_FORWARDED_PROTO"] = "http" + return self.app(environ, start_response) + + +if _panel_domain: + app.wsgi_app = _PanelHostMiddleware(app.wsgi_app, _panel_domain) def login_required(view): diff --git a/scripts/install.sh b/scripts/install.sh index e2c4daa..dfd1b8b 100644 --- a/scripts/install.sh +++ b/scripts/install.sh @@ -216,6 +216,7 @@ Type=simple WorkingDirectory=${ROOT_DIR}/panel Environment=JIEDIAN_ROOT=${ROOT_DIR} Environment=PANEL_PATH=${PANEL_PATH} +Environment=PANEL_DOMAIN=${DOMAIN} ExecStart=${ROOT_DIR}/panel/venv/bin/python app.py Restart=on-failure RestartSec=5 diff --git a/server/nginx/acme.conf.template b/server/nginx/acme.conf.template index dbd56d2..1ef879f 100644 --- a/server/nginx/acme.conf.template +++ b/server/nginx/acme.conf.template @@ -20,10 +20,11 @@ server { __PANEL_ALLOW__ proxy_pass http://127.0.0.1:5080/; proxy_http_version 1.1; - proxy_set_header Host $host; + proxy_set_header Host __DOMAIN__; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-Host __DOMAIN__; proxy_set_header X-Forwarded-Prefix __PANEL_PREFIX__; } }