804 lines
27 KiB
Nginx Configuration File
804 lines
27 KiB
Nginx Configuration File
|
|
||
|
|
#user nobody;
|
||
|
|
worker_processes 1;
|
||
|
|
|
||
|
|
#error_log logs/error.log;
|
||
|
|
#error_log logs/error.log notice;
|
||
|
|
#error_log logs/error.log info;
|
||
|
|
|
||
|
|
#pid logs/nginx.pid;
|
||
|
|
|
||
|
|
|
||
|
|
events {
|
||
|
|
worker_connections 1024;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
http {
|
||
|
|
include mime.types;
|
||
|
|
default_type application/octet-stream;
|
||
|
|
|
||
|
|
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||
|
|
# '$status $body_bytes_sent "$http_referer" '
|
||
|
|
# '"$http_user_agent" "$http_x_forwarded_for"';
|
||
|
|
|
||
|
|
#access_log logs/access.log main;
|
||
|
|
|
||
|
|
sendfile on;
|
||
|
|
#tcp_nopush on;
|
||
|
|
|
||
|
|
#keepalive_timeout 0;
|
||
|
|
keepalive_timeout 65;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
client_body_buffer_size 128k;
|
||
|
|
fastcgi_intercept_errors on;
|
||
|
|
|
||
|
|
#gzip on;
|
||
|
|
upstream ordermanager {
|
||
|
|
# server 127.0.0.1:5610 weight=1;
|
||
|
|
server 120.48.86.207:5610 weight=1;
|
||
|
|
# server 180.76.178.231:5610 weight=1;
|
||
|
|
# server 1.14.15.135:5610 weight=1;
|
||
|
|
# server 172.27.0.12:5603 weight=3;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
upstream slsordermanager {
|
||
|
|
server 120.48.86.207:5710 weight=1;
|
||
|
|
}
|
||
|
|
|
||
|
|
upstream cool {
|
||
|
|
server 120.48.86.207:8002 weight=1;
|
||
|
|
}
|
||
|
|
|
||
|
|
upstream esservice {
|
||
|
|
server 120.48.86.207:9200 weight=1;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-www.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-www.chezhuquanyi.com.crt;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-www.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
#charset koi8-r;
|
||
|
|
|
||
|
|
#access_log logs/host.access.log main;
|
||
|
|
|
||
|
|
#error_page 404 /404.html;
|
||
|
|
|
||
|
|
# redirect server error pages to the static page /50x.html
|
||
|
|
#
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/ty-service-ui/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
#接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
# # sls接口
|
||
|
|
# 接口
|
||
|
|
location /prod-api/sls/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://slsordermanager/;
|
||
|
|
}
|
||
|
|
|
||
|
|
# ruoyi图片
|
||
|
|
location /profile/ {
|
||
|
|
alias /home/ty/uploadPath/;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 隐私协议
|
||
|
|
location /agreement/ {
|
||
|
|
root /usr/local/docker/nginx/html/;
|
||
|
|
index index.html;
|
||
|
|
}
|
||
|
|
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
|
||
|
|
#
|
||
|
|
#location ~ \.php$ {
|
||
|
|
# proxy_pass http://127.0.0.1;
|
||
|
|
#}
|
||
|
|
|
||
|
|
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
|
||
|
|
#
|
||
|
|
#location ~ \.php$ {
|
||
|
|
# root html;
|
||
|
|
# fastcgi_pass 127.0.0.1:9000;
|
||
|
|
# fastcgi_index index.php;
|
||
|
|
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
|
||
|
|
# include fastcgi_params;
|
||
|
|
#}
|
||
|
|
|
||
|
|
# deny access to .htaccess files, if Apache's document root
|
||
|
|
# concurs with nginx's one
|
||
|
|
#
|
||
|
|
#location ~ /\.ht {
|
||
|
|
# deny all;
|
||
|
|
#}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-repair.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-repair.chezhuquanyi.com.crt;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-repair.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/repair/build/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
server_name test-h5.chezhuquanyi.com;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
# 公众号授权域名
|
||
|
|
location = /MP_verify_TmMGIlUjmZecXYsi.txt {
|
||
|
|
alias /usr/local/mp/MP_verify_TmMGIlUjmZecXYsi.txt;
|
||
|
|
}
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/recordh5/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-pro.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-pro.chezhuquanyi.com_cert_chain.pem;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-pro.chezhuquanyi.com_key.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
# location / {
|
||
|
|
# root /workspace/ty/manager/;
|
||
|
|
# index index.html;
|
||
|
|
# try_files $uri $uri/ /index.html;
|
||
|
|
# }
|
||
|
|
|
||
|
|
# 公众号授权域名
|
||
|
|
location = /MP_verify_TmMGIlUjmZecXYsi.txt {
|
||
|
|
alias /usr/local/mp/MP_verify_TmMGIlUjmZecXYsi.txt;
|
||
|
|
}
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/recordh5-pro/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-api.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-api.chezhuquanyi.com.crt;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-api.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 300M;
|
||
|
|
location / {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 300;
|
||
|
|
proxy_read_timeout 300;
|
||
|
|
proxy_connect_timeout 300;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 图片
|
||
|
|
location /profile/ {
|
||
|
|
alias /home/ty/uploadPath/;
|
||
|
|
}
|
||
|
|
|
||
|
|
location /qr-codes/ {
|
||
|
|
alias /usr/local/frontend/qr_codes/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
# # sls接口
|
||
|
|
# 接口
|
||
|
|
location /prod-api/sls/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://slsordermanager/;
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
#阿维塔大客户AI审核管理端
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-avatr.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-avatr.chezhuquanyi.com_ca.pem;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-avatr.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 200M;
|
||
|
|
# location / {
|
||
|
|
# proxy_set_header Host $http_host;
|
||
|
|
# proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
# proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
# proxy_send_timeout 300;
|
||
|
|
# proxy_read_timeout 300;
|
||
|
|
# proxy_connect_timeout 300;
|
||
|
|
# proxy_pass http://ordermanager/;
|
||
|
|
# }
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/ai-sh-frontend-dist/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 接 口
|
||
|
|
location /test-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://192.168.80.3:8001/;
|
||
|
|
}
|
||
|
|
# 图片
|
||
|
|
location /profile/ {
|
||
|
|
alias /home/ty/uploadPath/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-manager.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-manager.chezhuquanyi.com_cert_chain.pem;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-manager.chezhuquanyi.com_key.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 20M;
|
||
|
|
# location / {
|
||
|
|
# proxy_set_header Host $http_host;
|
||
|
|
# proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
# proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
# proxy_send_timeout 300;
|
||
|
|
# proxy_read_timeout 300;
|
||
|
|
# proxy_connect_timeout 300;
|
||
|
|
# proxy_pass http://ordermanager/;
|
||
|
|
# }
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/ty-service-ui/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 接 口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
# # sls接口
|
||
|
|
# 接口
|
||
|
|
location /prod-api/sls/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://slsordermanager/;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 图片
|
||
|
|
location /profile/ {
|
||
|
|
alias /home/ty/uploadPath/;
|
||
|
|
}
|
||
|
|
|
||
|
|
# # 保险公司定损
|
||
|
|
# location /insurance/ {
|
||
|
|
# alias /workspace/ty/insurance/;
|
||
|
|
# }
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-yuntu.chezhuquanyi.com; # localhost修改为您证书绑定的域名。
|
||
|
|
#ssl on; #设置为on启用SSL功能。
|
||
|
|
root html;
|
||
|
|
index index.html index.htm;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-yuntu.chezhuquanyi.com.crt; # 将domain_ca.crt替换成您证书的文件名。
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-yuntu.chezhuquanyi.com.key; # 将domain.key替换成您证书的密钥文件名。
|
||
|
|
ssl_session_timeout 5m; # 指定SSL/TLS会话的超时时间
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
charset utf-8;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/yuntu/guide;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-deploy.chezhuquanyi.com; # localhost修改为您证书绑定的域名。
|
||
|
|
#ssl on; #设置为on启用SSL功能。
|
||
|
|
root html;
|
||
|
|
index index.html index.htm;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-deploy.chezhuquanyi.com.crt; # 将domain_ca.crt替换成您证书的文件名。
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-deploy.chezhuquanyi.com.key; # 将domain.key替换成您证书的密钥文件名。
|
||
|
|
ssl_session_timeout 5m; # 指定SSL/TLS会话的超时时间
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
charset utf-8;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
|
||
|
|
location / {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://120.48.86.207:9999;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# 中欧
|
||
|
|
server {
|
||
|
|
listen 5667;
|
||
|
|
charset utf-8;
|
||
|
|
server_name localhost;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/zo-h5/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# gps localtest
|
||
|
|
server {
|
||
|
|
listen 7611;
|
||
|
|
charset utf-8;
|
||
|
|
server_name localhost;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://amn5eb.natappfree.cc;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# 长安h5
|
||
|
|
server {
|
||
|
|
listen 5668;
|
||
|
|
charset utf-8;
|
||
|
|
server_name localhost;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/changan-h5/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
#塞力斯
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name sls-test.repair.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/sls-test.repair.chezhuquanyi.com.crt;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/sls-test.repair.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/sls-repair/build/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://slsordermanager/;
|
||
|
|
}
|
||
|
|
# # sls接口
|
||
|
|
# 接口
|
||
|
|
location /prod-api/sls/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://slsordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name sls-test.h5.chezhuquanyi.com;
|
||
|
|
#ssl on;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/sls-test.h5.chezhuquanyi.com.crt;
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/sls-test.h5.chezhuquanyi.com.key;
|
||
|
|
ssl_session_timeout 5m;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||
|
|
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:1m;
|
||
|
|
|
||
|
|
client_max_body_size 100M;
|
||
|
|
|
||
|
|
# location / {
|
||
|
|
# root /workspace/ty/manager/;
|
||
|
|
# index index.html;
|
||
|
|
# try_files $uri $uri/ /index.html;
|
||
|
|
# }
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/sls-h5/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
# 接口
|
||
|
|
location /prod-api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_send_timeout 1200;
|
||
|
|
proxy_read_timeout 1200;
|
||
|
|
proxy_connect_timeout 1200;
|
||
|
|
proxy_pass http://ordermanager/;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name rzyx.chezhuquanyi.com; # localhost修改为您证书绑定的域名。
|
||
|
|
#ssl on; #设置为on启用SSL功能。
|
||
|
|
root html;
|
||
|
|
index index.html index.htm;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/rzyx.chezhuquanyi.com.crt; # 将domain_ca.crt替换成您证书的文件名。
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/rzyx.chezhuquanyi.com.key; # 将domain.key替换成您证书的密钥文件名。
|
||
|
|
ssl_session_timeout 5m; # 指定SSL/TLS会话的超时时间
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
charset utf-8;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/rzyx/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# HTTP重定向到HTTPS
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
server_name test-sh.chezhuquanyi.com;
|
||
|
|
return 301 https://$server_name$request_uri;
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-sh.chezhuquanyi.com; # localhost修改为您证书绑定的域名。
|
||
|
|
#ssl on; #设置为on启用SSL功能。
|
||
|
|
root html;
|
||
|
|
index index.html index.htm;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-sh.chezhuquanyi.com.crt; # 将domain_ca.crt替换成您证书的文件名。
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-sh.chezhuquanyi.com.key; # 将domain.key替换成您证书的密钥文件名。
|
||
|
|
ssl_session_timeout 5m; # 指定SSL/TLS会话的超时时间
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
charset utf-8;
|
||
|
|
client_max_body_size 100M; # 增加文件上传限制
|
||
|
|
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/ai_flow_frontend/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
# 调试信息 - 可以临时添加用于排查
|
||
|
|
location /nginx-status {
|
||
|
|
return 200 "nginx is working\n";
|
||
|
|
add_header Content-Type text/plain;
|
||
|
|
}
|
||
|
|
|
||
|
|
# SSE 流式接口 (agent对话/调用) - 必须禁用缓冲
|
||
|
|
location /api/open/agent/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto https;
|
||
|
|
|
||
|
|
# ★ SSE 关键配置：禁用代理缓冲，实时推送事件
|
||
|
|
proxy_buffering off;
|
||
|
|
proxy_cache off;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Connection '';
|
||
|
|
|
||
|
|
proxy_redirect off;
|
||
|
|
|
||
|
|
# SSE 长连接超时（视频分析可能耗时较长）
|
||
|
|
proxy_send_timeout 600;
|
||
|
|
proxy_read_timeout 600;
|
||
|
|
proxy_connect_timeout 300;
|
||
|
|
|
||
|
|
proxy_pass http://cool/open/agent/;
|
||
|
|
}
|
||
|
|
|
||
|
|
# AI审核系统API接口代理 - 统一处理所有 /api/ 请求
|
||
|
|
location /api/ {
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto https;
|
||
|
|
|
||
|
|
# 禁用重定向，防止 307 错误
|
||
|
|
proxy_redirect off;
|
||
|
|
|
||
|
|
# 禁用缓存，避免 API 请求被缓存
|
||
|
|
add_header Cache-Control "no-cache, no-store, must-revalidate";
|
||
|
|
add_header Pragma "no-cache";
|
||
|
|
add_header Expires "0";
|
||
|
|
|
||
|
|
# 超时设置
|
||
|
|
proxy_send_timeout 300;
|
||
|
|
proxy_read_timeout 300;
|
||
|
|
proxy_connect_timeout 300;
|
||
|
|
|
||
|
|
# 代理到后端，保持完整的 /api/ 路径
|
||
|
|
proxy_pass http://cool/;
|
||
|
|
|
||
|
|
# 添加调试头信息
|
||
|
|
add_header X-Debug-Proxy "cool" always;
|
||
|
|
}
|
||
|
|
|
||
|
|
# socket需额外配置
|
||
|
|
location /socket {
|
||
|
|
proxy_pass http://cool/socket;
|
||
|
|
proxy_connect_timeout 3600s; #配置点1
|
||
|
|
proxy_read_timeout 3600s; #配置点2,如果没效,可以考虑这个时间配置长一点
|
||
|
|
proxy_send_timeout 3600s; #配置点3
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header REMOTE-HOST $remote_addr;
|
||
|
|
#proxy_bind $remote_addr transparent;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header Upgrade $http_upgrade;
|
||
|
|
proxy_set_header Connection "upgrade";
|
||
|
|
rewrite /socket/(.*) /$1 break;
|
||
|
|
proxy_redirect off;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
server_name test-report.chezhuquanyi.com; # localhost修改为您证书绑定的域名。
|
||
|
|
#ssl on; #设置为on启用SSL功能。
|
||
|
|
root html;
|
||
|
|
index index.html index.htm;
|
||
|
|
ssl_certificate /usr/local/docker/nginx/https/cert/test-report.chezhuquanyi.com_cert_chain.crt; # 将domain_ca.crt替换成您证书的文件名。
|
||
|
|
ssl_certificate_key /usr/local/docker/nginx/https/cert/test-report.chezhuquanyi.com_key.key; # 将domain.key替换成您证书的密钥文件名。
|
||
|
|
ssl_session_timeout 5m; # 指定SSL/TLS会话的超时时间
|
||
|
|
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #使用此加密套件。
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
charset utf-8;
|
||
|
|
client_max_body_size 20M;
|
||
|
|
|
||
|
|
|
||
|
|
location / {
|
||
|
|
root /usr/local/frontend/qr_codes/h5/;
|
||
|
|
index index.html;
|
||
|
|
try_files $uri $uri/ /index.html;
|
||
|
|
}
|
||
|
|
|
||
|
|
#location / {
|
||
|
|
# root /usr/local/frontend/report/;
|
||
|
|
# index index.html;
|
||
|
|
# try_files $uri $uri/ /index.html;
|
||
|
|
#}
|
||
|
|
}
|
||
|
|
}
|