google-reverse-proxy/google-reverse-proxy.conf at master · wbbim/google-reverse-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
############################
# Reverse Proxy For Google #
############################

### Nginx must be compiled with HttpSubsModule
### See http://wiki.nginx.org/HttpSubsModule

### Replace {YOUR.DOMAIN.HERE},{YOUR-SSL-CERT-HERE.crt},{YOUR-SSL-KEY-HERE.key},{YOUR-SSL-CA-CERT-HERE.crt} with corresponding code.


server
{
    listen 80;
    listen 443 ssl spdy;
    server_name {YOUR.DOMAIN.HERE};

    ssl_prefer_server_ciphers On;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5:!DSS:!RC4;
    ssl_certificate         /etc/pki/tls/certs/YOUR-SSL-CERT-HERE.crt;
    ssl_certificate_key     /etc/pki/tls/private/YOUR-SSL-KEY-HERE.key;
    ssl_trusted_certificate /etc/pki/tls/certs/YOUR-SSL-CA-CERT-HERE.crt;
    ssl_stapling on;
    ssl_stapling_verify on;
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";

    if ($server_port = 80) {
	rewrite ^/(.*)$ https://{YOUR.DOMAIN.HERE}/$1 redirect;
    }

    gzip off;
    gzip_static off;

    proxy_hide_header content-security-policy;
    proxy_set_header Accept-Encoding "";
    proxy_set_header User-Agent $http_user_agent;
    proxy_cookie_domain .google.com {YOUR.DOMAIN.HERE};

    location / {
	proxy_pass https://www.google.com/;
	proxy_redirect http://www.google.com/ /;
	proxy_redirect https://www.google.com/ /;
	subs_filter_types application/javascript text/javascript application/json;
	subs_filter 'www.google.com' '{YOUR.DOMAIN.HERE}';
    # Change the following line to your local Google domain. For example, www.google.co.jp for VPS in Japan.
	subs_filter 'www.google.co.id' '{YOUR.DOMAIN.HERE}';
	subs_filter 'http://webcache.googleusercontent.com' 'https://webcache.googleusercontent.com';
	subs_filter 'www.gstatic.com' '{YOUR.DOMAIN.HERE}/www.gstatic.com';
	subs_filter 'ssl.gstatic.com' '{YOUR.DOMAIN.HERE}/ssl.gstatic.com';
	subs_filter 'id.google.com' '{YOUR.DOMAIN.HERE}/id.google.com';
	subs_filter 'plus.google.com' '{YOUR.DOMAIN.HERE}/plus.google.com';
	subs_filter 'clients1.google.com' '{YOUR.DOMAIN.HERE}/clients1.google.com';
	subs_filter 'encrypted-tbn0.gstatic.com' '{YOUR.DOMAIN.HERE}/encrypted-tbn0.gstatic.com';
	subs_filter 'encrypted-tbn1.gstatic.com' '{YOUR.DOMAIN.HERE}/encrypted-tbn1.gstatic.com';
	subs_filter 'encrypted-tbn2.gstatic.com' '{YOUR.DOMAIN.HERE}/encrypted-tbn2.gstatic.com';
	subs_filter 'encrypted-tbn3.gstatic.com' '{YOUR.DOMAIN.HERE}/encrypted-tbn3.gstatic.com';
    }

    location /robots.txt {
        alias /var/www/html/proxy/robots.txt;
    }

    location /www.gstatic.com {
	proxy_pass https://www.gstatic.com/;
	subs_filter_types application/javascript text/javascript;
	subs_filter 'apis.google.com' '{YOUR.DOMAIN.HERE}/apis.google.com';
	subs_filter 'ssl.gstatic.com' '{YOUR.DOMAIN.HERE}/ssl.gstatic.com';
	subs_filter 'plus.google.com' '{YOUR.DOMAIN.HERE}/plus.google.com';
    }
    location /ssl.gstatic.com {
	proxy_pass https://ssl.gstatic.com/;
	subs_filter_types application/javascript text/javascript;
	subs_filter 'www.google.com' '{YOUR.DOMAIN.HERE}';
    }
    location /apis.google.com {
	proxy_pass https://apis.google.com/;
    }
    location /id.google.com {
	proxy_pass https://id.google.com/;
    }
    location /plus.google.com {
        proxy_pass https://plus.google.com/;
    }
    location /clients1.google.com {
	proxy_pass https://client1.google.com/;
    }
    location /encrypted-tbn0.gstatic.com {
        proxy_pass https://encrypted-tbn0.gstatic.com/;
    }
    location /encrypted-tbn1.gstatic.com {
        proxy_pass https://encrypted-tbn1.gstatic.com/;
    }
    location /encrypted-tbn2.gstatic.com {
        proxy_pass https://encrypted-tbn2.gstatic.com/;
    }
    location /encrypted-tbn3.gstatic.com {
        proxy_pass https://encrypted-tbn3.gstatic.com/;
    }
    location /url {
        proxy_pass https://www.google.com/url;
        subs_filter_types application/javascript text/javascript;
        subs_filter 'webcache.googleusercontent.com' '{YOUR.DOMAIN.HERE}/webcache.googleusercontent.com';
    }
    location /webcache.googleusercontent.com {
	proxy_pass http://webcache.googleusercontent.com/;
	subs_filter_types application/javascript text/javascript;
	subs_filter 'http://webcache.googleusercontent.com' 'https://{YOUR.DOMAIN.HERE}/webcache.googleusercontent.com';
    }
}