32 lines
968 B
Nginx Configuration File
32 lines
968 B
Nginx Configuration File
# 正式环境 HTTPS 反代（nginx）。证书挂载自 deploy/tls/certs/（gen-cert.sh 生成）。
|
||
# 上游为同 compose 网络内的 app:4173；对外仅暴露本代理的 8443。
|
||
server {
|
||
listen 8443 ssl;
|
||
listen [::]:8443 ssl;
|
||
http2 on;
|
||
server_name _;
|
||
|
||
ssl_certificate /etc/nginx/tls/server.crt;
|
||
ssl_certificate_key /etc/nginx/tls/server.key;
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
ssl_ciphers HIGH:!aNULL:!MD5;
|
||
ssl_prefer_server_ciphers on;
|
||
ssl_session_cache shared:SSL:2m;
|
||
ssl_session_timeout 1h;
|
||
|
||
# 银行流水 Excel 上传上限
|
||
client_max_body_size 25m;
|
||
|
||
proxy_http_version 1.1;
|
||
proxy_read_timeout 120s;
|
||
proxy_send_timeout 120s;
|
||
|
||
location / {
|
||
proxy_pass http://app:4173;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto https;
|
||
}
|
||
}
|