117 lines
3.4 KiB
Plaintext
117 lines
3.4 KiB
Plaintext
worker_processes 1;
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
include mime.types;
|
||
default_type application/octet-stream;
|
||
sendfile on;
|
||
keepalive_timeout 65;
|
||
client_max_body_size 10m;
|
||
|
||
gzip on;
|
||
gzip_min_length 1k;
|
||
gzip_buffers 16 64K;
|
||
gzip_http_version 1.1;
|
||
gzip_comp_level 5;
|
||
gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml;
|
||
gzip_vary on;
|
||
gzip_proxied expired no-cache no-store private auth;
|
||
gzip_disable "MSIE [1-6]\.";
|
||
|
||
# Http跳转Https
|
||
# server {
|
||
# listen 80;
|
||
# server_name localhost;
|
||
# location / {
|
||
# rewrite ^(.*) https://$server_name$1 permanent;
|
||
# }
|
||
# }
|
||
|
||
server {
|
||
listen 80;
|
||
|
||
# SSL 默认访问端口号为443
|
||
listen 443 ssl;
|
||
server_name localhost;
|
||
charset utf-8;
|
||
|
||
# 证书文件的路径
|
||
ssl_certificate /usr/share/nginx/ssl/fastbee.crt;
|
||
# 私钥文件的路径
|
||
ssl_certificate_key /usr/share/nginx/ssl/fastbee.key;
|
||
ssl_session_timeout 10m;
|
||
# 请按照以下协议配置
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
# 请按照以下套件配置，配置加密套件，写法遵循openssl 标准
|
||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
|
||
ssl_prefer_server_ciphers on;
|
||
|
||
# 前端
|
||
location / {
|
||
root /usr/share/nginx/html;
|
||
try_files $uri $uri/ /index.html;
|
||
index index.html index.htm;
|
||
}
|
||
|
||
# H5移动端
|
||
location /h5 {
|
||
alias /usr/share/nginx/h5/;
|
||
try_files $uri $uri/ /index.html;
|
||
index index.html index.htm;
|
||
}
|
||
|
||
# 文档（可选）
|
||
location /doc {
|
||
alias /usr/share/nginx/doc/;
|
||
try_files $uri $uri/ /index.html;
|
||
index index.html index.htm;
|
||
}
|
||
|
||
# 可视化平台
|
||
location /view {
|
||
alias /usr/share/nginx/view/;
|
||
index index.html;
|
||
try_files $uri $uri/ /index.html last;
|
||
}
|
||
|
||
# 后端接口
|
||
location /prod-api/ {
|
||
proxy_set_header Host $http_host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header REMOTE-HOST $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_pass http://java:8080/;
|
||
}
|
||
|
||
# 设备http接入接口
|
||
location /http/ {
|
||
proxy_set_header Host $http_host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header REMOTE-HOST $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_pass http://java:8081/;
|
||
}
|
||
|
||
# wss连接代理到ws
|
||
location /mqtt {
|
||
proxy_pass http://java:8083/mqtt;
|
||
proxy_read_timeout 60s;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real_IP $remote_addr;
|
||
proxy_set_header X-Forwarded-for $remote_addr;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade $http_upgrade;
|
||
proxy_set_header Connection 'Upgrade';
|
||
}
|
||
|
||
error_page 500 502 503 504 /50x.html;
|
||
location = /50x.html {
|
||
root html;
|
||
}
|
||
}
|
||
}
|