diff --git a/.github/workflows/setup-proxy-cn-homepage.yml b/.github/workflows/setup-proxy-cn-homepage.yml new file mode 100644 index 0000000..cd498f3 --- /dev/null +++ b/.github/workflows/setup-proxy-cn-homepage.yml @@ -0,0 +1,63 @@ +name: Setup Proxy for cn-homepage.svc.plus + +on: + workflow_dispatch: + inputs: + dummy: + description: 'Manual trigger' + required: false + +jobs: + deploy: + runs-on: ubuntu-latest + steps: + - name: 🚀 Configure Nginx on proxy host + uses: appleboy/ssh-action@v1.0.0 + with: + host: ${{ secrets.CN_PROXY_HOST }} + username: ${{ secrets.CN_PROXY_HOST_USER }} + key: ${{ secrets.SSH_PRIVATE_KEY }} + script: | + apt-get update + apt-get install -y nginx + cat <<'NGINXCONF' > /etc/nginx/sites-available/default + # 1. HTTP 自动跳转到 HTTPS + server { + listen 80; + server_name cn-homepage.svc.plus; + return 301 https://cn-homepage.svc.plus$request_uri; + } + + # 2. HTTPS 静态站部署 svc.plus + server { + listen 443 ssl http2; + server_name cn-homepage.svc.plus; + + ssl_certificate /etc/ssl/svc.plus.pem; + ssl_certificate_key /etc/ssl/svc.plus.rsa.key; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + # 3. 指向静态构建输出目录 + root /var/www/XControl/ui/homepage/out; + index index.html; + + # 4. 页面访问(含 SPA fallback) + location / { + try_files $uri $uri/ /index.html; + } + + # 5. 静态资源缓存优化 + location ~* \.(?:ico|css|js|gif|jpe?g|png|woff2?)$ { + expires 30d; + access_log off; + add_header Cache-Control "public"; + } + + # 6. 隐藏 . 文件(如 .DS_Store) + location ~ /\. { + deny all; + } + } + NGINXCONF + systemctl restart nginx