From e923abf630959731632f4449cbb49538391fa889 Mon Sep 17 00:00:00 2001 From: dxin Date: Thu, 30 Oct 2025 11:42:33 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20s1=20=E5=8E=9F=E6=9C=AC?= =?UTF-8?q?=E7=9A=84nginx=20=E9=85=8D=E7=BD=AE=E6=96=87=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- nginx/s1.jennie.im.conf | 252 +++++++++++++++++++++++++++++++++++----- 1 file changed, 224 insertions(+), 28 deletions(-) diff --git a/nginx/s1.jennie.im.conf b/nginx/s1.jennie.im.conf index fc78379..4db7750 100644 --- a/nginx/s1.jennie.im.conf +++ b/nginx/s1.jennie.im.conf @@ -426,21 +426,6 @@ server { } } - -# /api/share 下所有路径 -# /api/showcase 下所有路径 -# https://s1.jennie.im/api/conversation/v1/8edec3be-f646-4155-8f36-3c0a29a622e2 - - - -# debug/pprof -# api/chat/v1/stream -# api/conversation -# api/shares -# api/showcases -# api/searches - - # go的代理配置 location ~ ^/(debug/pprof|api/chat/v1/stream|api/conversation/|api/shares|api/showcases|api/searches) { proxy_pass http://10.0.0.5:8100; @@ -465,12 +450,6 @@ server { } } - - - - - - location /api/chat/stream { proxy_pass http://s1_jennie_im_backend; proxy_set_header Host $host; @@ -542,13 +521,6 @@ server { } - # 缓存控制，确保 JS 文件不缓存老内容 - #location ~* \.(js|css|woff2|json|svg)$ { - # root /data/tengine/html/jennie-frontend/dist; - # expires off; - # add_header Cache-Control "no-cache, no-store, must-revalidate"; - #} - # dev的支付模块 location /dev-api/payment/webhook/ { proxy_pass http://106.53.194.199:8011; #运维机器的8011（与容器8091映射）代理到dev的8090 @@ -695,3 +667,227 @@ server { root /data/tengine/html/jennie-frontend/dist; } } + + + + + + + +# ============10-30============================================== + +upstream s1_jennie_im_backend { + server 10.0.0.5:8000 weight=10 max_fails=3 fail_timeout=30s; + keepalive 128; +} + + +log_format s1_jennie_im_log '客户端IP: $remote_addr | 用户: $remote_user | 时间: $time_local | ' + '请求方法和路径: "$request" | 状态码: $status | 响应大小: $body_bytes_sent | ' + '来源页面: "$http_referer" | 客户端UA: "$http_user_agent" | ' + '上游服务器: $upstream_addr | 上游响应耗时: $upstream_response_time | ' + '请求总耗时: $request_time | Host: $host'; + +server { + listen 443 ssl; + server_name s1.jennie.im; + + ssl_certificate /data/tengine/certificate/jennie.im.crt; + ssl_certificate_key /data/tengine/certificate/jennie.im.key; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + # 单独日志文件 + access_log /data/tengine/logs/s1_jennie_im_access.log s1_jennie_im_log; + error_log /data/tengine/logs/s1_jennie_im_error.log; + + + location /ingest/ { + proxy_pass https://us.i.posthog.com/; + proxy_set_header Host us.i.posthog.com; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + + # go的代理配置 + location ~ ^/(debug/pprof|api/chat|api/conversation/|api/shares|api/showcases|api/searches) { + proxy_pass http://10.0.0.5:8100; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + proxy_buffering off; + proxy_cache off; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_request_buffering off; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + + + + location /api/chat/stream { + proxy_pass http://s1_jennie_im_backend; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + proxy_buffering off; + proxy_cache off; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_request_buffering off; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + # 增加客户端到Nginx的连接超时时间 + proxy_read_timeout 3600s; + proxy_send_timeout 3600s; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + location /api/ { + proxy_pass http://s1_jennie_im_backend; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + proxy_buffering off; + proxy_cache off; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_request_buffering off; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + + # 前端静态文件 + location / { + root /data/tengine/html/jennie-frontend/dist; + index index.html; + + try_files $uri $uri/ /index.html; + } + + # 精确匹配 index.html，禁用缓存 + location = /index.html { + root /data/tengine/html/jennie-frontend/dist; + add_header Cache-Control "no-cache, no-store, must-revalidate"; + } + # 静态资源开启长缓存（带 hash） + location ~* \.(js|css|woff2|json|svg|png|jpg|jpeg|gif|ico|ttf|otf|eot|mp4|webm|webp)$ { + root /data/tengine/html/jennie-frontend/dist; + add_header Cache-Control "public, max-age=31536000, immutable"; + } + + # sit的支付模块 + location /payment/webhook/ { + proxy_pass http://106.53.194.199:8010; #运维机器的8010(与容器的8090映射)代理到sit的8090 + proxy_set_header Host 106.53.194.199; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + + proxy_intercept_errors off; + proxy_buffering off; + proxy_cache off; + proxy_set_header Connection keep-alive; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + + + + + # 打到国内sit的agent.jar包 + location /sit-api/agent/ { + proxy_pass http://106.53.194.199:8070; + proxy_set_header Host 106.53.194.199; + + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + + proxy_intercept_errors off; + proxy_buffering off; + proxy_cache off; + proxy_set_header Connection keep-alive; + + client_max_body_size 300M; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + + location /sit-api/system { + proxy_pass http://106.53.194.199:8070; + proxy_set_header Host 106.53.194.199; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + + proxy_intercept_errors off; + proxy_buffering off; + proxy_cache off; + proxy_set_header Connection keep-alive; + + add_header 'Access-Control-Allow-Origin' "$http_origin" always; + add_header 'Access-Control-Allow-Credentials' 'true' always; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always; + add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,X-Requested-With,Accept,Origin' always; + + client_max_body_size 300M; + + if ($request_method = OPTIONS ) { + return 204; + } + } + + # 错误页面 + error_page 500 502 503 504 /50x.html; + location = /50x.html { + root /data/tengine/html/jennie-frontend/dist; + } +} + +# ====================10-30======================================== \ No newline at end of file