111 lines
3.0 KiB
Plaintext
111 lines
3.0 KiB
Plaintext
server {
|
|
listen 80;
|
|
server_name 0.0.0.0;
|
|
|
|
|
|
location / {
|
|
root /app/dist;
|
|
index index.html index.htm;
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
location ^~ /api/v1/ {
|
|
proxy_pass http://127.0.0.1:1023/;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
client_max_body_size 900M;
|
|
client_body_buffer_size 900M;
|
|
|
|
proxy_connect_timeout 720;
|
|
proxy_read_timeout 720;
|
|
proxy_send_timeout 720;
|
|
}
|
|
|
|
# redirect server error pages to the static page /50x.html
|
|
#
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl default_server;
|
|
server_name 0.0.0.0;
|
|
|
|
ssl_protocols TLSv1.3;
|
|
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA:AES256-SHA;
|
|
ssl_conf_command Ciphersuites TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256;
|
|
ssl_verify_client off;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_certificate /usr/local/nginx/conf/man/certs/rsa.dev.pem;
|
|
ssl_certificate_key /usr/local/nginx/conf/man/certs/rsa.dev.key;
|
|
|
|
location / {
|
|
root /app/dist;
|
|
index index.html index.htm;
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
location ^~ /api/v1/ {
|
|
proxy_pass http://127.0.0.1:1023/;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
client_max_body_size 900M;
|
|
client_body_buffer_size 900M;
|
|
|
|
proxy_connect_timeout 720;
|
|
proxy_read_timeout 720;
|
|
proxy_send_timeout 720;
|
|
}
|
|
|
|
# redirect server error pages to the static page /50x.html
|
|
#
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
server {
|
|
listen 8443 ssl default_server;
|
|
server_name 0.0.0.0;
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_ciphers ECDHE-SM2-SM4-GCM-SM3:ECDHE-SM2-SM4-CBC-SM3:ECC-SM2-SM4-GCM-SM3:ECC-SM2-SM4-CBC-SM3;
|
|
ssl_conf_command Ciphersuites TLS_SM4_GCM_SM3:TLS_SM4_CCM_SM3;
|
|
ssl_verify_client off;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_certificate /usr/local/nginx/conf/man/certs/sm2.sig.pem;
|
|
ssl_certificate_key /usr/local/nginx/conf/man/certs/sm2.sig.key;
|
|
|
|
location / {
|
|
root /app/dist;
|
|
index index.html index.htm;
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
location ^~ /api/v1/ {
|
|
proxy_pass http://127.0.0.1:1023/;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
client_max_body_size 900M;
|
|
client_body_buffer_size 900M;
|
|
|
|
proxy_connect_timeout 720;
|
|
proxy_read_timeout 720;
|
|
proxy_send_timeout 720;
|
|
}
|
|
|
|
# redirect server error pages to the static page /50x.html
|
|
#
|
|
error_page 500 502 503 504 /50x.html;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
} |