Nginx反向代理Docker Apache中CakePHP静态资源加载故障排查

你这问题核心出在静态资源的请求没有代理到Apache容器，而是让Nginx在本地找文件，同时rewrite规则的顺序和CakePHP的路径感知配置也没到位。直接给你改好的配置和关键点：

1. 修正静态资源的Nginx配置块 #

原来的静态资源块错误地在Nginx本地查找文件，但静态资源实际存放在Apache容器内的subdirectory/webroot目录下，必须转发给Apache处理：

location ~* \.(jpg|jpeg|png|gif|css|js|ico|xml)$ {
    rewrite ^/(.*)$ /subdirectory/webroot/$1 break;
    proxy_pass http://172.17.0.3:8080;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    expires 30d;
    access_log off;
}

2. 调整主请求的代理规则顺序与头信息 #

rewrite规则必须放在proxy_pass之前，否则代理会先执行，rewrite无法生效。同时要添加X-Forwarded-Prefix头，让CakePHP感知实际的路径前缀：

location / {
    rewrite ^/(.*)$ /subdirectory/$1 break;
    proxy_pass http://172.17.0.3:8080;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Prefix /subdirectory;
}

3. 配置CakePHP的反向代理感知 #

仅修改Nginx还不够，需要让CakePHP知道请求来自反向代理，否则生成的静态资源URL仍会出错。打开CakePHP项目的config/app.php，调整以下配置项：

return [
    'App' => [
        'baseUrl' => false, // 不要硬编码路径前缀，让框架从代理头获取
        // 保留其他原有配置
    ],
    'Security' => [
        'trustedProxies' => ['172.17.0.1'], // 填写Nginx所在的Docker网关IP
        'trustProxy' => true,
        // 如果使用HTTPS，将secure设为true
    ],
];

完整修复后的Nginx配置 #

替换后的完整Nginx配置如下：

server {
    listen 80;
    server_name test.org www.test.org *.test.org;

    location / {
        rewrite ^/(.*)$ /subdirectory/$1 break;
        proxy_pass http://172.17.0.3:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Prefix /subdirectory;
    }

    location ~* \.(jpg|jpeg|png|gif|css|js|ico|xml)$ {
        rewrite ^/(.*)$ /subdirectory/webroot/$1 break;
        proxy_pass http://172.17.0.3:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        expires 30d;
        access_log off;
    }

    error_page 404 /404.html;
    location = /404.html {
        internal;
        root /usr/share/nginx/html;
    }

    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        internal;
        root /usr/share/nginx/html;
    }
}

问题根源总结 #

• 静态资源块未代理到Apache，Nginx本地不存在对应路径，导致404
• rewrite规则顺序错误，代理先执行后rewrite无法生效，请求未添加子目录前缀
• CakePHP未配置反向代理信任，无法生成正确的静态资源URL

内容的提问来源于stack exchange，提问作者joshv2