server {
  listen 80;
  server_name dev.svc.plus dev-console.svc.plus;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl http2;
  server_name dev.svc.plus dev-console.svc.plus;

  ssl_certificate     /etc/ssl/svc.plus.pem;
  ssl_certificate_key /etc/ssl/svc.plus.key;
  ssl_protocols       TLSv1.2 TLSv1.3;
  ssl_ciphers         HIGH:!aNULL:!MD5;

  # ================================
  # Next.js 静态资源 (_next/static/*)
  # ================================
  location /_next/static/ {
    proxy_pass http://next_dashboard;
    proxy_http_version 1.1;

    access_log on;

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

  }

  # ================================
  # Public 静态资源 (favicon, images)
  # ================================
  location /public/ {
    alias /var/www/XControl/dashboard/public/;
    access_log on;
  }

  # ================================
  # API / SSR 页面
  # ================================
  location / {
    proxy_pass http://next_dashboard;
    proxy_http_version 1.1;

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    proxy_set_header Cookie $http_cookie;
    proxy_pass_header Set-Cookie;

    # WebSocket 支持 (Next.js HMR, API)
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
  }

  # 禁止访问隐藏文件
  location ~ /\. {
    deny all;
  }

  # ================================
  # 性能优化：开启 gzip 压缩
  # ================================
  gzip on;
  gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
  gzip_min_length 1024;
  gzip_proxied any;
  gzip_comp_level 6;
}