server/sa-charts
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

docker-swarm-review

Browse Source
This commit is contained in:
禹梦成
2026-05-13 15:23:46 +08:00
parent da02c6a994
commit 5074e9cc42
128 changed files with 13062 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
docker-swarm-review/nginx-review-132/README Normal file
View File

@@ -0,0 +1,10 @@
# crm1环境下 部署nginx
env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_nginx
# review环境下 部署nginx
env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_nginx

58
docker-swarm-review/nginx-review-132/docker-compose.yml Normal file
View File

@@ -0,0 +1,58 @@
version: '3.8'
networks:
default:
name: ${NAMESPACE}
external: true
services:
server1:
image: 'docker.io/bitnami/nginx:1.24'
ports:
- mode: host
protocol: tcp
published: 8180
target: 8080
- mode: host
protocol: tcp
published: 8143
target: 8443
environment:
- TZ=Asia/Shanghai
volumes:
- /opt/logs/nginx/:/opt/bitnami/nginx/logs/
configs:
- source: nginx_conf
target: /opt/bitnami/nginx/conf/nginx.conf
- source: nginx_ssl_sinoassist_config
target: /opt/bitnami/nginx/conf/ssl.sinoassist.conf
- source: ssl_sinoassist_key
target: /opt/bitnami/nginx/conf/server_blocks/sinoassist.com.key
- source: ssl_sinoassist_pem
target: /opt/bitnami/nginx/conf/server_blocks/sinoassist.com.pem
- source: nginx_review_config
target: /opt/bitnami/nginx/conf/server_blocks/review_temp.conf
deploy:
mode: replicated
replicas: 1
update_config:
order: start-first
placement:
constraints:
- node.hostname==ZD-BAK-APP2
configs:
nginx_conf:
external: true
name: nginx_conf_v1
nginx_ssl_sinoassist_config:
external: true
name: nginx_ssl_sinoassist_conf_v1
nginx_review_config:
external: true
name: nginx_review_config_v2
ssl_sinoassist_key:
external: true
name: ssl_sinoassist_key_2024
ssl_sinoassist_pem:
external: true
name: ssl_sinoassist_pem_2024

4
docker-swarm-review/nginx-review-132/env_crm1 Normal file
View File

@@ -0,0 +1,4 @@
NAMESPACE=crm1
NODE_PORT=8080
CUSTOME_CONFIG=nginx_conf_v1
CUSTOME_CONFIG=nginx_conf_v1

1
docker-swarm-review/nginx-review-132/env_review Normal file
View File

@@ -0,0 +1 @@
NAMESPACE=review

60
docker-swarm-review/nginx-review-132/nginx.conf Normal file
View File

@@ -0,0 +1,60 @@
# Based on https://www.nginx.com/resources/wiki/start/topics/examples/full/#nginx-conf
user www www; ## Default: nobody
worker_processes auto;
error_log "/opt/bitnami/nginx/logs/error.log";
pid "/opt/bitnami/nginx/tmp/nginx.pid";
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] '
'"$request" $status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log "/opt/bitnami/nginx/logs/access.log" main;
add_header X-Frame-Options SAMEORIGIN;
client_body_temp_path "/opt/bitnami/nginx/tmp/client_body" 1 2;
proxy_temp_path "/opt/bitnami/nginx/tmp/proxy" 1 2;
fastcgi_temp_path "/opt/bitnami/nginx/tmp/fastcgi" 1 2;
scgi_temp_path "/opt/bitnami/nginx/tmp/scgi" 1 2;
uwsgi_temp_path "/opt/bitnami/nginx/tmp/uwsgi" 1 2;
sendfile on;
tcp_nopush on;
tcp_nodelay off;
gzip on;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_proxied any;
gzip_types text/plain text/css application/javascript text/xml application/xml+rss;
keepalive_timeout 65;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
client_max_body_size 105M;
server_tokens off;
absolute_redirect off;
port_in_redirect off;
include "/opt/bitnami/nginx/conf/server_blocks/*.conf";
# # HTTP Server
# server {
# # Port to listen on, can also be set in IP:PORT format
# listen 80;
# include "/opt/bitnami/nginx/conf/bitnami/*.conf";
# location /status {
# stub_status on;
# access_log off;
# allow 127.0.0.1;
# deny all;
# }
# }
}

282
docker-swarm-review/nginx-review-132/nginx_review_config_v1 Normal file
View File

@@ -0,0 +1,282 @@
#### 中道review环境开始 ####
upstream api.zhongdao {
server ss52_sa-gateway_svc:8080;
server ss53_sa-gateway_svc:8080;
}
# 中道外部接口
server {
listen 8080;
server_name api.sinoassist.net api.sinoassist.com xcx-api.sinoassist.com interface.review.sino-assist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
location / {
proxy_pass http://api.zhongdao;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location ~ .*actuator.* {
deny all;
}
}
# 接口
server {
listen 8080;
server_name api-nj.do-dec.com api-cd.do-dec.com api-wh.do-dec.com api-hz.do-dec.com api-sh.do-dec.com;
location / {
proxy_pass http://api.zhongdao;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location ~ .*actuator.* {
deny all;
}
}
server {
server_name site.sinoassist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
location / {
root /zd/cc-site/dist/;
index index.html index.htm;
try_files $uri $uri/ /index.html;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
}
server {
server_name www.sinoassist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
location /h5/rescue {
alias /zd/rescue-h5/dist/;
try_files $uri $uri/ /h5/rescue/index.html;
index index.html;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
location /dev/h5/rescue {
proxy_pass http://192.168.1.209:8030/dev/h5/rescue;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;
client_max_body_size 200m;
}
location /h5/client/ {
alias /zd/sino-client-h5/dist/build/h5/;
index index.html;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
location /h5/supplier/dispatch {
alias /zd/supplier-dispatch-h5/dist/;
try_files $uri $uri/ /h5/supplier/dispatch/index.html;
index index.html;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
# 太科app 海豚湾 微信验证配置
location /FowqINu4W1.txt {
default_type text/html;
return 200 "90d7811c9e948fe95df1fd46ca3c1984";
}
location /HQgOV1DbaM.txt {
default_type text/html;
return 200 "91aad82c4fadf3b6b4843771561dac64";
}
location /pay/gateway/ {
proxy_pass http://192.168.3.121:9226/pay/gateway/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;
client_max_body_size 200m;
}
location /pay/gateway/api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://192.168.3.121:9216/api/;
# 启用支持websocket连接
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://review_ss_sa-cc_svc:8080/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location ~ ^/(export-app|common|order|supplier|contract|base) {
proxy_pass http://api.zhongdao;
}
}
## 前端http强制转https
server {
listen 8080;
server_name www.sinoassist.com;
add_header Strict-Transport-Security max-age=15768000;
return 301 https://www.sinoassist.com$request_uri;
}
#### 中道review环境结束 ####
## 公司其他域名的切换
# 4s店微信
server {
listen 8080;
server_name wx4s.sinoassist.com;
location / {
proxy_pass http://192.168.10.7:8777;
}
}
# 微信供应商
server {
listen 8080;
server_name wxdd.sinoassist.com;
location / {
proxy_pass http://192.168.10.7:8568;
}
}
# 呼叫中心接口
server {
listen 8080;
server_name apicc.sinoassist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
location / {
proxy_pass http://192.168.5.201:8080;
}
}
# 呼叫中心接口websocket
server {
listen 8080;
server_name apiccws.sinoassist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
location / {
proxy_pass http://192.168.5.201:1884;
}
}
## 救援生产环境其他服务域名切换
## rabbitmq stomp
upstream stomp.zhongdao {
server review_rabbitmq_queue1:15674;
server review_rabbitmq_queue2:15674;
server review_rabbitmq_stats:15674;
}
server {
listen 8080;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
server_name stomp.sinoassist.com;
location / {
proxy_pass http://stomp.zhongdao;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
# 备份文件服务器
server {
listen 8080;
server_name file.sinoassist.com;
include /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
# 录音文件服务器
location /ly/ {
proxy_pass http://192.168.5.204:8088/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
# 备份文件服务器
location / {
proxy_pass http://192.168.10.18:8888;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;
if ($request_filename ~ .*\.(htm|html)$)
{
add_header Cache-Control no-cache;
}
}
}

11
docker-swarm-review/nginx-review-132/nginx_ssl_sinoassist_conf_v1 Normal file
View File

@@ -0,0 +1,11 @@
listen 8443 ssl;
ssl_certificate /opt/bitnami/nginx/conf/server_blocks/sinoassist.com.pem;
ssl_certificate_key /opt/bitnami/nginx/conf/server_blocks/sinoassist.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

59
docker-swarm-review/nginx-review-132/swarm/docker-compose.yml Normal file
View File

@@ -0,0 +1,59 @@
version: "3.8"
services:
nginx-review:
image: nginx:alpine
ports:
- target: 80
published: 80
protocol: tcp
mode: host
- target: 443
published: 443
protocol: tcp
mode: host
- target: 18888
published: 18888
protocol: tcp
mode: host
- target: 18889
published: 18889
protocol: tcp
mode: host
- target: 1180
published: 1180
protocol: tcp
mode: host
- target: 8888
published: 8888
protocol: tcp
mode: host
- target: 38888
published: 38888
protocol: tcp
mode: host
environment:
- TZ=Asia/Shanghai
volumes:
- /data/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- /data/nginx/sites:/etc/nginx/sites:ro
- /data/nginx/ssl.sino_assist.conf:/etc/nginx/ssl.sino_assist.conf:ro
- /data/nginx/ssl.conf:/etc/nginx/ssl.conf:ro
- /data/nginx/ssl:/etc/nginx/ssl:ro
- /opt/logs/nginx:/var/log/nginx
deploy:
replicas: 1
placement:
constraints:
- node.hostname == ZD-BAK-APP2
restart_policy:
condition: on-failure
update_config:
parallelism: 1
delay: 10s
networks:
- review
networks:
review:
external: true

14
docker-swarm-review/nginx-review-132/swarm/logrotate-nginx Normal file
View File

@@ -0,0 +1,14 @@
/opt/logs/nginx/*.log {
daily
rotate 90
dateext
dateformat -%Y%m%d
missingok
notifempty
compress
delaycompress
sharedscripts
postrotate
docker kill --signal=USR1 $(docker ps -qf name=nginx-review) 2>/dev/null || true
endscript
}

73
docker-swarm-review/nginx-review-132/swarm/nginx.conf Normal file
View File

@@ -0,0 +1,73 @@
worker_processes auto;
events {
worker_connections 10240;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
error_log /var/log/nginx/error.log warn;
client_header_buffer_size 512k;
large_client_header_buffers 4 512k;
client_max_body_size 500m;
sendfile on;
server_tokens off;
gzip on;
gzip_min_length 1k;
gzip_comp_level 3;
gzip_types text/plain application/javascript application/x-javascript text/javascript text/xml text/css;
gzip_disable "MSIE [1-6]\.";
gzip_vary on;
keepalive_timeout 6500;
proxy_connect_timeout 6000;
proxy_read_timeout 6000;
proxy_send_timeout 6000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 默认 server：拦截无匹配请求
server {
listen 80 default_server;
location / {
return 404;
}
}
include /etc/nginx/sites/*.conf;
}
stream {
upstream http_gateway {
server 127.0.0.1:18888;
}
upstream https_gateway {
server 127.0.0.1:18889;
}
map $ssl_preread_protocol $upstream {
default http_gateway;
"TLSv1.0" https_gateway;
"TLSv1.1" https_gateway;
"TLSv1.2" https_gateway;
"TLSv1.3" https_gateway;
}
server {
listen 8888;
listen 38888;
ssl_preread on;
proxy_pass $upstream;
}
}

95
docker-swarm-review/nginx-review-132/swarm/sites/crm1.conf Normal file
View File

@@ -0,0 +1,95 @@
server {
listen 80;
server_name crm1.sino-assist.com api1.sino-assist.com api-sit.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
# 中道汽车救援公众号
location /MP_verify_TyW3WkUF0gacMB4m.txt {
default_type text/html;
return 200 "TyW3WkUF0gacMB4m";
}
# 中道汽车服务服务号
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location / {
proxy_pass http://192.168.1.209:8080/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location /h5/supplier/dispatch {
proxy_pass http://192.168.1.209:8031/h5/supplier/dispatch;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location ^~ /dev/h5/rescue {
rewrite ^/dev/h5/rescue/(.*)$ /h5/client/$1 break;
proxy_pass http://192.168.1.209:8032;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location ^~ /dev/h5/rvc {
rewrite ^/dev/h5/rvc/(.*)$ /h5/rvc/$1 break;
proxy_pass http://192.168.1.209:8035;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/rvc/ {
proxy_pass http://192.168.1.209:8035/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/client/ {
proxy_pass http://192.168.1.209:8032/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /dev/h5/rentCar {
proxy_pass http://192.168.1.209:8034/dev/h5/rentCar;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}
server {
listen 80;
server_name portainer.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.209:9000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name oem-jlr.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.226:5868/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

75
docker-swarm-review/nginx-review-132/swarm/sites/crm2.conf Normal file
View File

@@ -0,0 +1,75 @@
server {
listen 80;
server_name api2.sino-assist.com interface.crm2.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /oss/minio/ {
proxy_set_header Host $http_host;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_pass http://192.168.3.132:28773/oss/minio/;
}
location ~ .*actuator.* {
deny all;
}
location / {
proxy_pass http://192.168.1.209:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name test-api-sh.do-dec.com test-api-nj.do-dec.com test-api-cd.do-dec.com test-api-wh.do-dec.com test-api-hz.do-dec.com;
location / {
proxy_pass http://192.168.1.209:8080;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# cc.crm2 前端（https）
server {
include /etc/nginx/ssl.sino_assist.conf;
server_name cc.crm2.sino-assist.com crm2.sino-assist.com;
location / {
proxy_pass http://192.168.1.209:8081;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# http → https 跳转
server {
listen 80;
server_name cc.crm2.sino-assist.com crm2.sino-assist.com;
return 301 https://$server_name$request_uri;
}
server {
listen 80;
server_name stomp2.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.209:15674;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
}
}

27
docker-swarm-review/nginx-review-132/swarm/sites/fastdfs.conf Normal file
View File

@@ -0,0 +1,27 @@
server {
listen 18888;
listen 18889 ssl;
server_name file-gk.sino-assist.com;
include /etc/nginx/ssl.conf;
location /n1/ {
proxy_pass http://192.168.3.125:8080/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location / {
proxy_pass http://192.168.3.119:8888;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

242
docker-swarm-review/nginx-review-132/swarm/sites/git.conf Normal file
View File

@@ -0,0 +1,242 @@
server {
listen 80;
server_name jira.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8018/;
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_redirect off;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_buffers 32 4k;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
}
}
server {
listen 80;
server_name itsm.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /WW_verify_TWp375Kzd79EfP0l.txt {
default_type text/html;
return 200 "TWp375Kzd79EfP0l";
}
location / {
proxy_pass http://192.168.3.200:8013/;
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers X-Requested-With;
add_header Access-Control-Allow-Methods GET,POST,OPTIONS;
proxy_redirect off;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_buffers 32 4k;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
}
}
server {
listen 80;
server_name wiki.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.101:8081;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
proxy_read_timeout 86400s;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_buffering off;
proxy_cache off;
}
}
server {
listen 80;
server_name vote.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.124:8089;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
proxy_read_timeout 86400s;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_buffering off;
proxy_cache off;
}
}
server {
listen 80;
server_name jira.sinoassist.com;
location / {
proxy_pass http://192.168.3.129:10880/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 1180;
location / {
proxy_pass http://192.168.3.140:8018/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name harbor.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8082/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name docker-mirror.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:5000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name git.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:3000/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name maven.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:8081/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name api-doc.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.129:7700/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name hr.sinoassist.com;
include /etc/nginx/ssl.conf;
location / {
proxy_pass http://192.168.3.200:8012;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name training.sino-assist.com;
include /etc/nginx/ssl.conf;
location / {
proxy_pass http://192.168.1.226:8090;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name csc.sino-assist.com;
location / {
proxy_pass http://192.168.1.161:8011;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name file.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.1.171:8088/;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

14
docker-swarm-review/nginx-review-132/swarm/sites/oss.conf Normal file
View File

@@ -0,0 +1,14 @@
server {
listen 80;
server_name oss.sinoassist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.125:25773;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

70
docker-swarm-review/nginx-review-132/swarm/sites/pay.conf Normal file
View File

@@ -0,0 +1,70 @@
server {
listen 80;
server_name pay.sinoassist.com;
include /etc/nginx/ssl.conf;
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9216;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9226;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name pay-manager.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9217;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9227;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
server {
listen 80;
server_name pay-client.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /api/ {
proxy_next_upstream http_502 http_504 error timeout invalid_header;
proxy_pass http://192.168.3.125:9218;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location / {
proxy_pass http://192.168.3.125:9228;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

80
docker-swarm-review/nginx-review-132/swarm/sites/review.conf Normal file
View File

@@ -0,0 +1,80 @@
# review 后端接口（原经 3.110 → 3.132:18092 中转，现直连网关）
server {
listen 80;
server_name interface.review.sino-assist.com apireview.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.132:28092;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location ~ .*actuator.* {
deny all;
}
}
# review 前端
server {
include /etc/nginx/ssl.sino_assist.conf;
server_name cc.review.sino-assist.com ccreview.sino-assist.com;
location /MP_verify_TyW3WkUF0gacMB4m.txt {
default_type text/html;
return 200 "TyW3WkUF0gacMB4m";
}
location /MP_verify_WjQInvWDvPvfZvL0.txt {
default_type text/html;
return 200 "WjQInvWDvPvfZvL0";
}
location /dev/h5/rescue/ {
proxy_pass http://192.168.1.209:8032/;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /m/ {
return 301 https://api1.sino-assist.com/base/shortUrlMappings/$request_uri;
}
location /m/dev- {
return 301 https://api.sinoassist.com/base/shortUrlMappings/$request_uri;
}
location / {
proxy_pass http://192.168.3.132:8081;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}
# http → https 跳转
server {
listen 80;
server_name cc.review.sino-assist.com ccreview.sino-assist.com;
add_header Strict-Transport-Security max-age=15768000;
return 301 https://ccreview.sino-assist.com$request_uri;
}
server {
listen 80;
server_name jenkins.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.120:8081;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
}

43
docker-swarm-review/nginx-review-132/swarm/sites/uat.conf Normal file
View File

@@ -0,0 +1,43 @@
# http → https 跳转
server {
listen 80;
server_name uat.sino-assist.com api-uat.sino-assist.com api-pre.sino-assist.com;
return 301 https://$host$request_uri;
}
server {
server_name uat.sino-assist.com api-uat.sino-assist.com api-pre.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_cookie_path / "/; HttpOnly; Secure; SameSite=Strict";
proxy_pass http://192.168.3.126:8080/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
if ($request_filename ~ .*\.(htm|html)$) {
add_header Cache-Control no-cache;
}
}
location /h5/supplier/dispatch {
proxy_pass http://192.168.3.126:8031/h5/supplier/dispatch;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /h5/client {
proxy_pass http://192.168.3.126:8032/h5/client;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
location /dev/h5/rentCar {
proxy_pass http://192.168.3.126:8034/dev/h5/rentCar;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}

32
docker-swarm-review/nginx-review-132/swarm/sites/wx.conf Normal file
View File

@@ -0,0 +1,32 @@
server {
listen 80;
server_name supplierwxtest.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /ws {
proxy_pass http://192.168.3.111:13000/ws;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
location / {
proxy_pass http://192.168.13.24:8081;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}
server {
listen 80;
server_name site.sinoassist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.10.2:8090;
proxy_set_header X-Forwarded-Host $server_name;
client_max_body_size 200m;
}
}

60
docker-swarm-review/nginx-review-132/swarm/sites/zd_report.conf Normal file
View File

@@ -0,0 +1,60 @@
server {
listen 80;
server_name report.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location /SinoGYS {
proxy_pass http://192.168.14.47/SinoGYS;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
location /SinoORG {
proxy_pass http://192.168.14.47/SinoORG;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
location / {
proxy_pass http://192.168.3.123:8080;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}
server {
listen 80;
server_name bi.sino-assist.com;
include /etc/nginx/ssl.sino_assist.conf;
location / {
proxy_pass http://192.168.3.123:4280;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}
server {
listen 80;
server_name bi.sinoassist.com;
include /etc/nginx/ssl.conf;
location /WW_verify_TWp375Kzd79EfP0l.txt {
default_type text/html;
return 200 "TWp375Kzd79EfP0l";
}
location / {
proxy_pass http://192.168.3.131:80;
proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
}
}

8
docker-swarm-review/nginx-review-132/swarm/ssl.conf Normal file
View File

@@ -0,0 +1,8 @@
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/2026/sinoassist.com.pem;
ssl_certificate_key /etc/nginx/ssl/2026/sinoassist.com.key;
ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

8
docker-swarm-review/nginx-review-132/swarm/ssl.sino_assist.conf Normal file
View File

@@ -0,0 +1,8 @@
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/23368363_sino-assist.com_nginx/sino-assist.com.pem;
ssl_certificate_key /etc/nginx/ssl/23368363_sino-assist.com_nginx/sino-assist.com.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5:!DES:!3DES;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;