server {
listen       80;
    server_name  0.0.0.0;


    location / {
        root   /app/dist;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }
	
    location ^~ /api/v1/ {
	proxy_pass http://127.0.0.1:1023/;
	proxy_set_header   X-Real-IP  $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
	    client_max_body_size 900M;
        client_body_buffer_size 900M;

        proxy_connect_timeout 720;
        proxy_read_timeout 720; 
        proxy_send_timeout 720;
    }

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}


server {
    listen       443 ssl default_server;
    server_name  0.0.0.0;

    ssl_protocols  TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES128-SHA:AES256-SHA;
    ssl_conf_command Ciphersuites TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256;
    ssl_verify_client off;
    ssl_prefer_server_ciphers on;

    ssl_certificate /usr/local/nginx/conf/man/certs/rsa.dev.pem;
    ssl_certificate_key /usr/local/nginx/conf/man/certs/rsa.dev.key;

    location / {
        root   /app/dist;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }

    location ^~ /api/v1/ {
	proxy_pass http://127.0.0.1:1023/;
	proxy_set_header   X-Real-IP  $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
	    client_max_body_size 900M;
        client_body_buffer_size 900M;

        proxy_connect_timeout 720;
        proxy_read_timeout 720; 
        proxy_send_timeout 720;
    }

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}



server {
    listen       8443 ssl default_server;
    server_name  0.0.0.0;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ntls on;
    ssl_ciphers ECC-SM2-SM4-GCM-SM3:ECC-SM2-SM4-CBC-SM3:ECDHE-SM2-SM4-GCM-SM3:ECDHE-SM2-SM4-CBC-SM3:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256;
    ssl_conf_command Ciphersuites TLS_SM4_GCM_SM3:TLS_SM4_CCM_SM3:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384;
    ssl_verify_client off;
    ssl_prefer_server_ciphers on;

    ssl_certificate /usr/local/nginx/conf/man/certs/sm2.sig.pem /usr/local/nginx/conf/man/certs/sm2.enc.pem;
    ssl_certificate /usr/local/nginx/conf/man/certs/rsa.dev.pem;
    ssl_certificate_key /usr/local/nginx/conf/man/certs/sm2.sig.key /usr/local/nginx/conf/man/certs/sm2.enc.key;
    ssl_certificate_key /usr/local/nginx/conf/man/certs/rsa.dev.key;

    location / {
        root   /app/dist;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }

    location ^~ /api/v1/ {
	proxy_pass http://127.0.0.1:1023/;
	proxy_set_header   X-Real-IP  $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
	    client_max_body_size 900M;
        client_body_buffer_size 900M;

        proxy_connect_timeout 720;
        proxy_read_timeout 720; 
        proxy_send_timeout 720;
    }

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}