# vim /usr/local/lua/getipinfo.luangx.say("<br>IP location query result:<hr><br>")local cjson=require 'cjson'
local geo=require 'resty.maxminddb'
local arg_ip=ngx.var.arg_ip
local arg_node=ngx.var.arg_node
ngx.say("IP:",arg_ip,", node:",arg_node,"<br>")if not geo.initted() thengeo.init("/usr/local/openresty/GeoLite2-City.mmdb")
endlocal res,err=geo.lookup(arg_ip or ngx.var.remote_addr)if not res thenngx.say("Please check the ip address you provided: <div style='color:red'>",arg_ip,"</div>")ngx.log(ngx.ERR,' failed to lookup by ip , reason :',err)
elsengx.say("Result:",cjson.encode(res))if arg_node thenngx.say("node name:",ngx.var.arg_node, " , value:",cjson.encode(res[ngx.var.arg_node] or {}))endend

#user  apache;
worker_processes  8;#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;#pid        logs/nginx.pid;
pid        /data/www/logs/nginx.pid;worker_rlimit_nofile  65535;events {use epoll;    worker_connections  10240;
}http {include       mime.types;default_type  application/octet-stream;#set_real_ip_from   0.0.0.0/0;#real_ip_header     X-Forwarded-For;#proxy_set_header   Host    $host;  #proxy_set_header   X-Real-IP       $remote_addr;  #proxy_set_header   X-Forwarded-For $http_x_forwarded_for;  #proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for; proxy_headers_hash_max_size 51200;proxy_headers_hash_bucket_size      6400;ssl_session_cache    shared:SSL:10m;ssl_session_timeout  10m;# fastcgi_cache_path /usr/local/nginx/fastcgi_cache levels=1:2 keys_zone=TEST:10m inactive=5m;    fastcgi_connect_timeout 300;    fastcgi_send_timeout 300;    fastcgi_read_timeout 300;    fastcgi_buffer_size 64k;    fastcgi_buffers 4 64k;    # fastcgi_busy_buffers_size 128k;    fastcgi_temp_file_write_size 128k;    # fastcgi_cache TEST;    #fastcgi_cache_valid 200 302 1h;    #    fastcgi_cache_valid 301 1d;    #fastcgi_cache_valid any 1m; #    fastcgi_cache_min_uses 1;#geoip_country   /usr/local/nginx/conf/GeoIP.dat;#fastcgi_param   GEOIP_COUNTRY_CODE $geoip_country_code;geoip2 conf/GeoIP2/GeoIP2-Country.mmdb {auto_reload 5m;$geoip2_metadata_country_build metadata build_epoch;$geoip2_data_country_code source=$remote_addr country iso_code;$geoip2_data_country_name country names en;}geoip2 conf/GeoIP2/GeoIP2-City.mmdb {$geoip2_data_city_name  city names en;}fastcgi_param COUNTRY_CODE $geoip2_data_country_code;fastcgi_param COUNTRY_NAME $geoip2_data_country_name;fastcgi_param CITY_NAME    $geoip2_data_city_name;open_file_cache max=204800 inactive=20s;open_file_cache_min_uses 1;open_file_cache_valid 30s; #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '#                  '$status $body_bytes_sent "$http_referer" '#                  '"$http_user_agent" "$http_x_forwarded_for"';#    log_format main '[$time_local] $remote_addr $status $request_time $body_bytes_sent "$request" "$http_referer" $upstream_addr $http_x_real_ip $http_x_forwarded_for $http_user_agent  $request_filename';log_format main  '$remote_addr - - [$time_local] - - "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_time '; #   log_format test '[$fastcgi_script_name] [$time_local] $remote_addr $status $request_time $body_bytes_sent "$request" "$http_referer" $upstream_addr $http_x_real_ip $http_x_forwarded_for $http_user_agent ';log_format error  '$remote_addr - - [$time_local] - - "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $request_time '; #access_log  logs/access.log  main;sendfile        on;tcp_nodelay    on;keepalive_timeout  70;#----for upload fileclient_max_body_size    8M;client_body_buffer_size 2M;#--- for resolve 400 errorclient_header_buffer_size 64k;large_client_header_buffers 4 64k;proxy_connect_timeout 60s;proxy_read_timeout 60s;#60s内后端服务器需要返回成功proxy_send_timeout 60s; proxy_buffer_size 16k;proxy_buffers 4 32k;proxy_busy_buffers_size 64k;proxy_temp_file_write_size 64k;gzip  on;gzip_vary off;gzip_min_length  1k;gzip_buffers     4 16k;gzip_http_version 1.0;gzip_comp_level  3;gzip_disable     "MSIE [1-6]\.";gzip_types text/plain text/css text/javascript application/x-javascript text/xml application/xml;fastcgi_intercept_errors on;ssi on;ssi_silent_errors on;#ssi_types text/shtml;expires 30d;server_names_hash_bucket_size 20480;#if_modified_since before;#limit_req_zone $binary_remote_addr zone=all_zone:10m rate=3r/s;#limit_req zone=all_zone burst=2 nodelay;limit_req_zone $binary_remote_addr $host $request_uri zone=all_zone:30m  rate=4r/s;geo $white_ip {ranges;default 0;1.1.1.1-1.1.1.254 1;192.168.254.1-192.168.254.254 2;}limit_req_whitelist geo_var_name=white_ip geo_var_value=1;limit_req_whitelist geo_var_name=white_ip geo_var_value=2;limit_req_whitelist geo_var_name=white_ip geo_var_value=3;limit_req_whitelist geo_var_name=white_ip geo_var_value=4;limit_req_whitelist geo_var_name=white_ip geo_var_value=5;limit_req_whitelist geo_var_name=white_ip geo_var_value=6;#    upstream php_pool{# ip_hash;#        server unix:/tmp/php-cgi.sock;#       server 192.168.254.126:9000 max_fails=0 fail_timeout=30s weight=3;#        keepalive 32;#        keepalive_timeout 30s;#        check interval=3000 rise=2 fall=5 timeout=1000 type=tcp port=9000;#        check_keepalive_requests 100;#        check_http_send "HEAD / HTTP/1.1\r\nConnection: keep-alive\r\n\r\n";#        check_http_expect_alive http_2xx http_3xx;#    }include vhost.d/*.conf;server {listen       80 default_server;server_name  localhost;location / {root   /data/www/html;index  index.html index.htm;}error_page   500 502 503 504  /50x.html;location = /50x.html {root   html;}location /ws_status {stub_status on;access_log off;}}
}

# 具体vhost的配置
# cat country-info.chinasoft.com.conf
server {listen 80;server_name       country-info.chinasoft.com ;#access_log      /data/www/logs/nginx_log/access/country-info.chinasoft.com_access.log main ;#error_log       /data/www/logs/nginx_log/error/country-info.chinasoft.com_error.log ;root            /data/www/vhosts/common-info.chinasoft.com/httpdocs ;index           index.html index.shtml index.php ;error_page  404 403             /404.html;location /api/v1/checkeu {add_header 'Access-Control-Allow-Origin' '*';add_header 'Access-Control-Allow-Credentials' 'true';add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';default_type 'text/plain';content_by_lua_file '/usr/local/nginx/conf/vhost.d/checkeu.lua';}}server {listen 443;ssl on;ssl_certificate         /usr/local/nginx/conf/cert2016/iskysoft_com.crt;  ssl_certificate_key     /usr/local/nginx/conf/cert2016/iskysoft_com.key;ssl_session_timeout     5m;ssl_protocols   TLSv1 TLSv1.1 TLSv1.2;ssl_ciphers     "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!AES128-GCM-SHA256:!AES256-GCM-SHA384:!AES128-SHA256:!AES256-SHA256:!AES128-SHA:!AES256-SHA:AES:!CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA";ssl_prefer_server_ciphers       on;server_name     country-info.chinasoft.com;access_log      /data/www/logs/nginx_log/access/country-info.chinasoft.com_access.log main ;error_log       /data/www/logs/nginx_log/error/country-info.chinasoft.com_error.log ;root            /data/www/vhosts/common-info.chinasoft.com/httpdocs ;index           index.html ;error_page  404 403             /404.html;location /api/v1/checkeu {add_header 'Access-Control-Allow-Origin' '*';add_header 'Access-Control-Allow-Credentials' 'true';add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';default_type 'text/plain';content_by_lua_file '/usr/local/nginx/conf/vhost.d/checkeu.lua';}
}

--ngx.say(" {\"c_type\":0}")
local ngxmatch=ngx.re.match
usercountry = ngx.var.geoip2_data_country_code
--usercountry = ngx.var.geoip_country_code
eopcountry = "AT|BE|BG|CY|HR|CZ|DK|EE|FI|FR|DE|GR|HU|IE|IT|LV|LT|LU|MT|NL|PL|PT|RO|SK|SI|ES|SE|GB"
if not usercountry thenusercountry = ''
endif not usercity thenusercity = ''
end
if ngxmatch(usercountry,eopcountry,"isjo") thenngx.say("{\"c_type\":1,\"country_code\":\""..usercountry.."\"}")
elsengx.say("{\"c_type\":0,\"country_code\":\""..usercountry.."\"}")
end