This commit is contained in:
awei
2025-06-15 17:13:26 +08:00
parent 21f4026106
commit cb8fe9f52e
11 changed files with 153 additions and 210 deletions

17
nginx/conf.d/membank.conf Normal file
View File

@@ -0,0 +1,17 @@
server {
listen 80;
server_name membank.deepseak.icu;
location / {
proxy_pass http://127.0.0.1:10001;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# 添加代理超时配置
proxy_connect_timeout 60s;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
}
}

View File

@@ -0,0 +1,30 @@
server {
listen 443 ssl;
server_name registry.deepseak.icu;
ssl_certificate /etc/letsencrypt/live/registry.deepseak.icu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/registry.deepseak.icu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
client_max_body_size 500m;
location / {
proxy_pass http://127.0.0.1:3005;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 60s;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
}
}
# HTTP redirect to HTTPS
server {
listen 80;
server_name registry.deepseak.icu;
return 301 https://$server_name$request_uri;
}

View File

@@ -1,45 +0,0 @@
server {
listen 443 ssl;
server_name tailscale.deepseak.icu;
ssl_certificate /etc/letsencrypt/live/tailscale.deepseak.icu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/tailscale.deepseak.icu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
client_max_body_size 5m;
# 匹配 /web 开头的请求
location ^~ /web {
proxy_pass http://localhost:3009;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# ... 原有跨域配置保持不变 ...
}
# 匹配其他请求
location / {
proxy_pass http://localhost:3008;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}