97 lines
2.7 KiB
Plaintext
97 lines
2.7 KiB
Plaintext
worker_processes 1;
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
include mime.types;
|
||
default_type application/octet-stream;
|
||
sendfile on;
|
||
keepalive_timeout 65;
|
||
|
||
gzip on;
|
||
gzip_min_length 1k;
|
||
gzip_buffers 16 64K;
|
||
gzip_http_version 1.1;
|
||
gzip_comp_level 5;
|
||
gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml;
|
||
gzip_vary on;
|
||
gzip_proxied expired no-cache no-store private auth;
|
||
gzip_disable "MSIE [1-6]\.";
|
||
|
||
server {
|
||
listen 80;
|
||
server_name localhost;
|
||
location / {
|
||
rewrite ^(.*) https://$server_name$1 permanent;
|
||
}
|
||
}
|
||
|
||
server {
|
||
# 侦听443端口
|
||
listen 443 ssl;
|
||
# 定义访问域名
|
||
server_name localhost;
|
||
#证书文件名称
|
||
ssl_certificate domain_bundle.crt;
|
||
#私钥文件名称
|
||
ssl_certificate_key domain.key;
|
||
|
||
#SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
|
||
#error_page 404/404.html;
|
||
#HTTP_TO_HTTPS_START
|
||
if ($server_port !~ 443){
|
||
rewrite ^(/.*)$ https://$host$1 permanent;
|
||
}
|
||
ssl_session_timeout 10m;
|
||
#请按照以下协议配置
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
#请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
|
||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
|
||
ssl_prefer_server_ciphers on;
|
||
|
||
# web端
|
||
location / {
|
||
root /var/wumei-smart/vue;
|
||
try_files $uri $uri/ /index.html;
|
||
index index.html index.htm;
|
||
}
|
||
|
||
# 服务端接口
|
||
location /prod-api/{
|
||
proxy_set_header Host $http_host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header REMOTE-HOST $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_pass http://localhost:8080/;
|
||
}
|
||
|
||
# emqx接口
|
||
location /api/v4/{
|
||
proxy_set_header Host $http_host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header REMOTE-HOST $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_pass http://localhost:8081/api/v4/;
|
||
}
|
||
|
||
# wss连接
|
||
location /mqtt {
|
||
proxy_pass http://localhost:8083/mqtt;
|
||
proxy_read_timeout 90s;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real_IP $remote_addr;
|
||
proxy_set_header X-Forwarded-for $remote_addr;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade $http_upgrade;
|
||
proxy_set_header Connection 'Upgrade';
|
||
}
|
||
|
||
|
||
error_page 500 502 503 504 /50x.html;
|
||
location = /50x.html {
|
||
root html;
|
||
}
|
||
}
|
||
} |