大量更新

50-202412-云南二级新/202504升级证书/real-nginx-conf.conf

@@ -0,0 +1,59 @@
+upstream  proxy_server {
+    ip_hash;
+    server 192.168.186.12:30500;
+    server 192.168.186.13:30500;
+    server 192.168.186.14:30500;
+}
+
+server {
+  listen 8088 ssl;
+  server_name 5ga-onesky.yncloudsaas.com;
+  # 指定证书和私钥路径
+  ssl_certificate /etc/nginx/conf.d/ssl.d/x.yncloudsaas.com.cert;  # 包含域名证书+中间证书
+  ssl_certificate_key /etc/nginx/conf.d/ssl.d/x.yncloudsaas.com.key;    # 私钥
+
+  # 可选：增强安全性配置
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_prefer_server_ciphers on;
+  ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256';
+
+  location / {
+      proxy_pass http://proxy_server;
+      client_max_body_size 5120m;
+      client_body_buffer_size 5120m;
+      client_body_timeout 6000s;
+      proxy_send_timeout 10000s;
+      proxy_read_timeout 10000s;
+      proxy_connect_timeout 600s;
+      proxy_max_temp_file_size 5120m;
+      proxy_request_buffering on;
+      proxy_buffering off;
+      proxy_buffer_size 4k;
+      proxy_buffers 4 12k;
+      proxy_set_header Host fake-domain.ynydapp.io;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  }
+
+  location /_AMapService/v4/map/styles {
+          set $args "$args&jscode=cf66cea95bdcdfcf8048456b36f357a1";
+          proxy_pass https://webapi.amap.com/v4/ap/styles;
+  }
+
+  location /_AMapService/ {
+      set $args "$args&jscode=cf66cea95bdcdfcf8048456b36f357a1";
+      proxy_pass https://restapi.amap.com/;
+  }
+
+  location /rtc/v1/ {
+        add_header Access-Control-Allow-Headers X-Requested-With;
+        add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
+        proxy_pass http://127.0.0.1:30985/rtc/v1/;
+  }
+
+  location ~ ^/\w*/actuator/ {
+      return 403;
+  }
+}