docker swarm

docker-swarm/nginx-prod-50/nginx_prod_config_v1

@@ -0,0 +1,167 @@
+
+
+upstream api.zhongdao {
+    server ss52_sa-gateway_svc:8080;
+    server ss53_sa-gateway_svc:8080;
+}
+
+# 中道外部接口
+server {
+    listen       8080;
+    server_name  api.sinoassist.net api.sinoassist.com xcx-api.sinoassist.com interface.review.sino-assist.com;
+    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
+
+
+    location / {
+        proxy_pass  http://api.zhongdao;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-Host $server_name;
+        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
+    location ~ .*actuator.* {
+        deny all;
+    }
+}
+
+
+# 接口
+server {
+    listen       8080;
+    server_name  api-nj.do-dec.com api-cd.do-dec.com api-wh.do-dec.com api-hz.do-dec.com api-sh.do-dec.com;
+
+    location / {
+        proxy_pass  http://api.zhongdao;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-Host $server_name;
+        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
+    location ~ .*actuator.* {
+        deny all;
+    }
+}
+
+
+server {
+    server_name site.sinoassist.com;
+    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
+
+
+    location / {   
+            root   /zd/cc-site/dist/;
+            index  index.html index.htm;
+            try_files $uri $uri/ /index.html;
+            if ($request_filename ~ .*\.(htm|html)$)
+            {
+                add_header Cache-Control no-cache;
+            }
+    }
+}
+
+
+server {
+    server_name www.sinoassist.com;
+    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
+
+    location /h5/rescue {
+        alias   /zd/rescue-h5/dist/;
+        try_files  $uri $uri/ /h5/rescue/index.html;
+        index index.html;
+        if ($request_filename ~ .*\.(htm|html)$)
+            {
+                    add_header Cache-Control no-cache;
+            }
+    }
+
+    location /dev/h5/rescue {
+        proxy_pass  http://192.168.1.209:8030/dev/h5/rescue;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-Host $server_name;
+        proxy_set_header   X-Forwarded-For
+        $proxy_add_x_forwarded_for;
+        client_max_body_size    200m;
+    }
+
+    location /h5/client/ {
+        alias   /zd/sino-client-h5/dist/build/h5/;
+        index index.html;
+        if ($request_filename ~ .*\.(htm|html)$)
+            {
+                    add_header Cache-Control no-cache;
+            }
+    }
+
+
+
+    location /h5/supplier/dispatch {
+        alias   /zd/supplier-dispatch-h5/dist/;
+        try_files  $uri $uri/  /h5/supplier/dispatch/index.html;
+        index index.html;
+        if ($request_filename ~ .*\.(htm|html)$)
+            {
+                    add_header Cache-Control no-cache;
+            }
+    }
+
+
+    # 太科app 海豚湾 微信验证配置
+
+    location /FowqINu4W1.txt {
+                default_type    text/html;
+                return 200 "90d7811c9e948fe95df1fd46ca3c1984";
+    }
+
+    location /HQgOV1DbaM.txt {
+                default_type    text/html;
+                return 200 "91aad82c4fadf3b6b4843771561dac64";
+    }
+    location /pay/gateway/ {
+        proxy_pass  http://192.168.3.121:9226/pay/gateway/;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-Host $server_name;
+        proxy_set_header   X-Forwarded-For
+        $proxy_add_x_forwarded_for;
+        client_max_body_size    200m;
+    }
+
+
+    location /pay/gateway/api/ {
+        proxy_next_upstream http_502 http_504 error timeout invalid_header;
+        proxy_set_header Host  $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_pass http://192.168.3.121:9216/api/;
+        # 启用支持websocket连接
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    location / {
+        proxy_pass  http://prod_ss_sa-cc_svc:8080/;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-Host $server_name;
+        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+    
+    location ~ ^/(export-app|common|order|supplier|contract|base) {
+            proxy_pass  http://api.zhongdao;
+    }
+}
+
+
+
+## 前端http强制转https
+server {
+    listen       8080;
+
+    server_name     www.sinoassist.com;
+    add_header Strict-Transport-Security max-age=15768000;
+    return 301 https://www.sinoassist.com$request_uri;
+
+}