update

k8s/xiongxiao.me/nginx/nginx-stream-proxy.conf

@@ -0,0 +1,44 @@
+# HTTP 转发 (80 -> 30080) - Let's Encrypt HTTP Challenge 需要
+upstream traefik_http {
+    server 127.0.0.1:30080;
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+
+    proxy_pass traefik_http;
+
+    # 优化的超时设置
+    proxy_timeout 1h;
+    proxy_connect_timeout 5s;
+
+    # Stream 模块支持的选项
+    proxy_responses 1;
+    proxy_buffer_size 16k;
+}
+
+# HTTPS 转发 (443 -> 30443)
+upstream traefik_https {
+    server 127.0.0.1:30443;
+}
+
+server {
+    listen 443;
+    listen [::]:443;
+
+    # SNI 预读 - 让 Traefik 处理 SSL 证书选择
+    ssl_preread on;
+
+    proxy_pass traefik_https;
+
+    # 优化的超时设置
+    proxy_timeout 1h;
+    proxy_connect_timeout 5s;
+
+    # Stream 模块支持的选项
+    proxy_responses 1;
+    proxy_buffer_size 16k;
+}
+
+