172 lines
6.4 KiB
Plaintext
172 lines
6.4 KiB
Plaintext
server {
|
||
|
||
# todo: put me into nginx.conf `http` section
|
||
# log_format huiwing_api_log '"$time_local" client=$remote_addr '
|
||
# 'method=$request_method request="$request" '
|
||
# 'request_length=$request_length '
|
||
# 'status=$status bytes_sent=$bytes_sent '
|
||
# 'body_bytes_sent=$body_bytes_sent '
|
||
# 'referer=$http_referer '
|
||
# 'user_agent="$http_user_agent" '
|
||
# 'upstream_addr=$upstream_addr '
|
||
# 'upstream_status=$upstream_status '
|
||
# 'request_time=$request_time '
|
||
# 'upstream_response_time=$upstream_response_time '
|
||
# 'upstream_connect_time=$upstream_connect_time '
|
||
# 'upstream_header_time=$upstream_header_time';
|
||
#
|
||
# access_log /usr/local/openresty/nginx/logs/huiwing_api.log huiwing_api_log;
|
||
|
||
proxy_read_timeout 30;
|
||
proxy_connect_timeout 30;
|
||
proxy_send_timeout 30;
|
||
# https://serverfault.com/questions/798734/use-variable-for-server-name-in-nginx#
|
||
# server_name $servername;
|
||
server_name "admin.moicen.com";
|
||
listen 443 ssl;
|
||
client_max_body_size 20M;
|
||
|
||
# disable in local test env
|
||
ssl_certificate /etc/letsencrypt/live/moicen.com/fullchain.pem; # managed by Certbot
|
||
ssl_certificate_key /etc/letsencrypt/live/moicen.com/privkey.pem; # managed by Certbot
|
||
|
||
set $tmp_file_dir "/file_upload"; # 文件存储路径
|
||
set $task_server "http://127.0.0.1:8080"; # Java task_server
|
||
set $huiwing_htyts_rust "127.0.0.1:3003";
|
||
set $htyuc "http://127.0.0.1:3000"; #htyuc host
|
||
set $resty_loc "/usr/local/openresty";
|
||
set $convert "/usr/bin/convert";
|
||
set $upyun_operator "moicen";
|
||
set $upyun_password "NyJ51zRwFApY9Wo9EHJMrb8GI9YtvpVN";
|
||
set $upyun_bucket "moicen";
|
||
set $upyun_directory "music-room";
|
||
set $upyun_domain "https://upyun.moicen.com";
|
||
set $upyun_cdn "https://upyun.moicen.com/";
|
||
set $wx_domain "wx.moicen.com";
|
||
set $upt_huiwings_secret "C5E4B01EC86A4CE8A84871EA2C826DD1";
|
||
set $upt_moicen_secret "339666FBB93C46D7B00D9F6E790C6C18";
|
||
set $upt_alchemy_secret "0D32E581A445404FA4C306709724FA07";
|
||
set $upt_duration 3600;
|
||
|
||
location / {
|
||
try_files $uri $uri/ /index.html;
|
||
proxy_set_header Host "admin.moicen.com";
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
# disable in local test env
|
||
proxy_set_header X-Forwarded-Proto https;
|
||
proxy_set_header X-Forwarded-For $remote_addr;
|
||
proxy_set_header X-Forwarded-Host $remote_addr;
|
||
}
|
||
|
||
root $resty_loc/nginx/html/admin;
|
||
index index.html;
|
||
|
||
add_header Access-Control-Allow-Origin $http_origin always;
|
||
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS' always;
|
||
add_header Access-Control-Allow-Headers 'Authorization,unionid,HtySudoerToken,HtyHost,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type' always;
|
||
add_header Access-Control-Allow-Credentials true always;
|
||
add_header Access-Control-Max-Age 86400 always;
|
||
if ($request_method = 'OPTIONS') {
|
||
return 200;
|
||
}
|
||
|
||
#Upload image files
|
||
location /api/ngx/image/upload {
|
||
content_by_lua_file $resty_loc/nginx/scripts/old_upload.lua;
|
||
}
|
||
#upload image from weixin media
|
||
location /api/ngx/image/wx_upload_single {
|
||
content_by_lua_file $resty_loc/nginx/scripts/wx_upload_single.lua;
|
||
}
|
||
#upload image files to combine by form
|
||
location /api/ngx/image/form_upload_to_combine {
|
||
content_by_lua_file $resty_loc/nginx/scripts/form_upload_to_combine.lua;
|
||
}
|
||
#Upload image files to combine by wx
|
||
location /api/ngx/image/wx_upload_to_combine {
|
||
content_by_lua_file $resty_loc/nginx/scripts/wx_upload_to_combine.lua;
|
||
}
|
||
#compress image file by form
|
||
location /api/ngx/image/form_upload_to_compress {
|
||
content_by_lua_file $resty_loc/nginx/scripts/form_upload_to_compress.lua;
|
||
}
|
||
#Combine image files
|
||
location /api/ngx/image/combine {
|
||
content_by_lua_file $resty_loc/nginx/scripts/combine.lua;
|
||
}
|
||
|
||
|
||
location /api/ngx/image/check {
|
||
content_by_lua_file $resty_loc/nginx/scripts/check_file.lua;
|
||
}
|
||
|
||
location /api/ngx/image/upload_combined {
|
||
content_by_lua_file $resty_loc/nginx/scripts/upload_combined_image.lua;
|
||
}
|
||
|
||
location /api/ngx/image/upyun_remove {
|
||
content_by_lua_file $resty_loc/nginx/scripts/upyun_remove.lua;
|
||
}
|
||
|
||
#Audio file download
|
||
location /api/ngx/audio/upload {
|
||
content_by_lua_file $resty_loc/nginx/scripts/upload_audio.lua;
|
||
}
|
||
#Audio file convert
|
||
location /api/ngx/audio/convert {
|
||
content_by_lua_file $resty_loc/nginx/scripts/convert_audio.lua;
|
||
}
|
||
|
||
location /api/ngx/upt {
|
||
content_by_lua_file $resty_loc/nginx/scripts/upt.lua;
|
||
}
|
||
|
||
location /api/ngx/convert/test {
|
||
content_by_lua_file $resty_loc/nginx/scripts/test.lua;
|
||
}
|
||
|
||
location /api/v1/kc/ {
|
||
proxy_pass http://127.0.0.1:3002/api/v1/kc/;
|
||
}
|
||
location /api/v1/ws/ {
|
||
proxy_pass http://127.0.0.1:3001/api/v1/ws/;
|
||
}
|
||
location /api/v1/uc/ {
|
||
proxy_pass http://127.0.0.1:3000/api/v1/uc/;
|
||
}
|
||
|
||
# 管理端历史路径 /api/v1/proc/*（与 /api/v2/proc/ 同 upstream Rust htyproc）
|
||
# 勿在 proxy_pass 的 host 段使用变量 + URI 路径组合，否则 nginx 可能不把 URI 正确传给 axum（对端 404）。
|
||
location /api/v1/proc/ {
|
||
proxy_pass http://127.0.0.1:3004/api/v1/proc/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
|
||
location /api/v2/ts/ {
|
||
rewrite ^/api/v2/ts/$ /api/v1/ts break;
|
||
rewrite ^/api/v2/ts/(.+)$ /api/v1/ts/$1 break;
|
||
proxy_pass http://127.0.0.1:3003;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
location /api/v2/proc/ {
|
||
proxy_pass http://127.0.0.1:3004/api/v1/proc/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
}
|
||
|
||
server {
|
||
listen 80;
|
||
server_name "admin.moicen.com";
|
||
location / {
|
||
return 301 https://$host$request_uri;
|
||
}
|
||
} |