nginx.conf 2.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970
  1. server {
  2. listen 80;
  3. location / {
  4. proxy_pass http://frontend:80;
  5. proxy_set_header Host $host;
  6. proxy_set_header X-Real-IP $remote_addr;
  7. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  8. proxy_set_header X-Forwarded-Proto $scheme;
  9. }
  10. location ^~ /api/ {
  11. proxy_pass http://backend:8082/;
  12. proxy_set_header Host $host;
  13. proxy_set_header X-Real-IP $remote_addr;
  14. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  15. proxy_set_header X-Forwarded-Proto $scheme;
  16. proxy_set_header REMOTE-HOST $remote_addr;
  17. proxy_http_version 1.1;
  18. add_header X-Cache $upstream_cache_status;
  19. set $static_fileTU7903MC 0;
  20. if ($uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$") {
  21. set $static_fileTU7903MC 1;
  22. expires 1m;
  23. }
  24. if ($static_fileTU7903MC = 0) {
  25. add_header Cache-Control no-cache;
  26. }
  27. }
  28. }
  29. server {
  30. listen 443 ssl;
  31. ssl_certificate /etc/nginx/cert/trane.trane-optimizer.com.cn.pem;
  32. ssl_certificate_key /etc/nginx/cert/trane.trane-optimizer.com.cn.key;
  33. ssl_session_cache shared:SSL:1m;
  34. ssl_session_timeout 5m;
  35. ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  36. ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
  37. ssl_prefer_server_ciphers on;
  38. location / {
  39. proxy_pass http://frontend:80;
  40. proxy_set_header Host $host;
  41. proxy_set_header X-Real-IP $remote_addr;
  42. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  43. proxy_set_header X-Forwarded-Proto $scheme;
  44. }
  45. location ^~ /api/ {
  46. proxy_pass http://backend:8082/;
  47. proxy_set_header Host $host;
  48. proxy_set_header X-Real-IP $remote_addr;
  49. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  50. proxy_set_header X-Forwarded-Proto $scheme;
  51. proxy_set_header REMOTE-HOST $remote_addr;
  52. proxy_http_version 1.1;
  53. add_header X-Cache $upstream_cache_status;
  54. set $static_fileTU7903MC 0;
  55. if ($uri ~* "\.(gif|png|jpg|css|js|woff|woff2)$") {
  56. set $static_fileTU7903MC 1;
  57. expires 1m;
  58. }
  59. if ($static_fileTU7903MC = 0) {
  60. add_header Cache-Control no-cache;
  61. }
  62. }
  63. }