feat(0.2.1): TLS 前置 13443 —— PowerSync 网页端必须安全上下文 (navigator.locks), 自签证书按路径分流 app/sync

deploy/0.2.1/docker-compose.yml

@@ -50,6 +50,20 @@ services:
       retries: 5
       start_period: 20s
 
+  # TLS 前置 (自签证书): PowerSync 网页端必须在安全上下文运行 (navigator.locks),
+  # 因此浏览器入口统一走 https://bh.vps.honor3.com:13443 (证书接受一次即可, app+sync 同源同证书)
+  tls-front:
+    image: nginx:alpine
+    restart: unless-stopped
+    depends_on:
+      - app
+      - powersync
+    volumes:
+      - ./tls/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./data/tls:/etc/nginx/certs:ro
+    ports:
+      - "13443:443"
+
   powersync:
     image: journeyapps/powersync-service:latest
     restart: unless-stopped