Merge pull request #25 from svc-design/codex/setup-nginx-for-cn-homepage.svc.plus

Add proxy setup github action

.github/workflows/setup-proxy-cn-homepage.yml

@@ -0,0 +1,63 @@
+name: Setup Proxy for cn-homepage.svc.plus
+
+on:
+  workflow_dispatch:
+    inputs:
+      dummy:
+        description: 'Manual trigger'
+        required: false
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 🚀 Configure Nginx on proxy host
+        uses: appleboy/ssh-action@v1.0.0
+        with:
+          host: ${{ secrets.CN_PROXY_HOST }}
+          username: ${{ secrets.CN_PROXY_HOST_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          script: |
+            apt-get update
+            apt-get install -y nginx
+            cat <<'NGINXCONF' > /etc/nginx/sites-available/default
+            # 1. HTTP 自动跳转到 HTTPS
+            server {
+              listen 80;
+              server_name cn-homepage.svc.plus;
+              return 301 https://cn-homepage.svc.plus$request_uri;
+            }
+
+            # 2. HTTPS 静态站部署 svc.plus
+            server {
+              listen 443 ssl http2;
+              server_name cn-homepage.svc.plus;
+
+              ssl_certificate /etc/ssl/svc.plus.pem;
+              ssl_certificate_key /etc/ssl/svc.plus.rsa.key;
+              ssl_protocols TLSv1.2 TLSv1.3;
+              ssl_ciphers HIGH:!aNULL:!MD5;
+
+              # 3. 指向静态构建输出目录
+              root /var/www/XControl/ui/homepage/out;
+              index index.html;
+
+              # 4. 页面访问（含 SPA fallback）
+              location / {
+                try_files $uri $uri/ /index.html;
+              }
+
+              # 5. 静态资源缓存优化
+              location ~* \.(?:ico|css|js|gif|jpe?g|png|woff2?)$ {
+                expires 30d;
+                access_log off;
+                add_header Cache-Control "public";
+              }
+
+              # 6. 隐藏 . 文件（如 .DS_Store）
+              location ~ /\. {
+                deny all;
+              }
+            }
+            NGINXCONF
+            systemctl restart nginx