$ show mashirozx/Pixiv-Nginx
This repository provides a preconfigured Nginx reverse proxy distribution designed to bypass regional internet censorship (primarily for Pixiv, but also covering GitHub, Steam, Discord, and other services). It includes a portable Nginx binary, self-signed SSL certificate generation scripts, and a set of modular site-specific configuration files that rewrite SNI and proxy requests to real upstream IP addresses. The system requires no VPN; instead, it modifies the user's `hosts` file to redirect target domains to localhost, where Nginx intercepts the traffic. The primary entry points are Windows batch scripts (e.g., `5.调试工具（这个功能全）.bat`) for starting, stopping, and reloading Nginx, while the core configuration is in `conf/nginx.conf` which includes reusable shared proxy parameters and site-specific configs. Certificate generation is handled by a standalone batch script folder (`自签证书傻瓜式批处理包/`) that creates a root CA and signs server certificates for all proxied domains. The repository is not a development framework or data pipeline; it is an end-user tool for circumventing censorship, with a strong emphasis on easy setup and maintenance through regular IP list updates.
The LLM identified 2 files worth highlighting for reuse:
A shared Nginx configuration file that defines common proxy parameters used across multiple site-specific configs. It sets the `proxy_ssl_server_name`, `proxy_ssl_name`, `proxy_ssl_verify` off, and disables buffering. This pattern avoids duplication and centralizes SNI spoofing logic, making it easy to add new proxy targets by including this file. It is reusable as a template for any reverse proxy setup that requires custom SNI handling.
A Windows batch script that automates the creation of a self-signed root Certificate Authority and a subordinate certificate for multiple domains, all through OpenSSL. It embeds configuration parameters, generates RSA keys, creates certificates with SANs, and outputs a trusted CA certificate file. This script is self-contained and can be adapted for any project requiring local HTTPS termination with custom CAs, demonstrating a non-trivial understanding of batch scripting and OpenSSL command-line workflows.