temp

k8s/xiongxiao.me/todos/nginx/kevisual.conf

@@ -0,0 +1,85 @@
+
+map $http_upgrade $connection_upgrade { 
+    default          keep-alive;  #默认为keep-alive 可以支持 一般http请求
+    'websocket'      upgrade;     #如果为websocket 则为 upgrade 可升级的。
+}
+
+server {
+    server_name kevisual.xiongxiao.me;
+    #add_header Access-Control-Allow-Origin *;
+    #add_header Access-Control-Allow-Credentials true;
+    #add_header Access-Control-Allow-Methods GET,POST;
+
+    client_max_body_size 200m;
+    
+    location / {
+      proxy_set_header HOST $host;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection $connection_upgrade;
+
+      proxy_http_version 1.1;
+      proxy_read_timeout 86400; # 可选的长时间保持 WebSocket 连接
+
+      proxy_pass http://localhost:3005/;
+    }
+    location /api/proxy {
+      proxy_set_header HOST $host;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection $connection_upgrade;
+      proxy_buffering off;
+
+      proxy_http_version 1.1;
+      proxy_read_timeout 86400; # 可选的长时间保持 WebSocket 连接
+
+      proxy_pass http://localhost:3005/api/proxy;
+    }
+    location /api {
+      proxy_set_header HOST $host;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection $connection_upgrade;
+      proxy_buffering off;
+
+      proxy_http_version 1.1;
+      proxy_read_timeout 86400; # 可选的长时间保持 WebSocket 连接
+
+      proxy_pass http://localhost:4005/api;
+    }
+	
+
+    listen [::]:443 ssl; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/kevisual.xiongxiao.me/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/kevisual.xiongxiao.me/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+
+}
+
+
+
+server {
+    if ($host = kevisual.xiongxiao.me) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    listen [::]:80;
+    server_name kevisual.xiongxiao.me;
+    return 404; # managed by Certbot
+
+
+}