accounts/example/sit/nginx/dev.svc.plus.conf

74 lines
2.0 KiB
Plaintext

server {
listen 80;
server_name dev.svc.plus dev-console.svc.plus;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
server_name dev.svc.plus dev-console.svc.plus;
ssl_certificate /etc/ssl/svc.plus.pem;
ssl_certificate_key /etc/ssl/svc.plus.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
# ================================
# Next.js 静态资源 (_next/static/*)
# ================================
location /_next/static/ {
proxy_pass http://next_dashboard;
proxy_http_version 1.1;
access_log on;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# ================================
# Public 静态资源 (favicon, images)
# ================================
location /public/ {
alias /var/www/XControl/dashboard/public/;
access_log on;
}
# ================================
# API / SSR 页面
# ================================
location / {
proxy_pass http://next_dashboard;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Cookie $http_cookie;
proxy_pass_header Set-Cookie;
# WebSocket 支持 (Next.js HMR, API)
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
# 禁止访问隐藏文件
location ~ /\. {
deny all;
}
# ================================
# 性能优化:开启 gzip 压缩
# ================================
gzip on;
gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
gzip_min_length 1024;
gzip_proxied any;
gzip_comp_level 6;
}