upstream api.zhongdao {
    server ss52_sa-gateway_svc:8080;
    server ss53_sa-gateway_svc:8080;
}

# 中道外部接口
server {
    listen       8080;
    server_name  api.sinoassist.net api.sinoassist.com xcx-api.sinoassist.com interface.review.sino-assist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;


    location / {
        proxy_pass  http://api.zhongdao;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location ~ .*actuator.* {
        deny all;
    }
}


# 接口
server {
    listen       8080;
    server_name  api-nj.do-dec.com api-cd.do-dec.com api-wh.do-dec.com api-hz.do-dec.com api-sh.do-dec.com;

    location / {
        proxy_pass  http://api.zhongdao;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location ~ .*actuator.* {
        deny all;
    }
}


server {
    server_name site.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;


    location / {   
            root   /zd/cc-site/dist/;
            index  index.html index.htm;
            try_files $uri $uri/ /index.html;
            if ($request_filename ~ .*\.(htm|html)$)
            {
                add_header Cache-Control no-cache;
            }
    }
}


server {
    server_name www.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;

    location /h5/rescue {
        alias   /zd/rescue-h5/dist/;
        try_files  $uri $uri/ /h5/rescue/index.html;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }

    location /dev/h5/rescue {
        proxy_pass  http://192.168.1.209:8030/dev/h5/rescue;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        client_max_body_size    200m;
    }

    location /h5/client/ {
        alias   /zd/sino-client-h5/dist/build/h5/;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }



    location /h5/supplier/dispatch {
        alias   /zd/supplier-dispatch-h5/dist/;
        try_files  $uri $uri/  /h5/supplier/dispatch/index.html;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }


    # 太科app 海豚湾 微信验证配置

    location /FowqINu4W1.txt {
                default_type    text/html;
                return 200 "90d7811c9e948fe95df1fd46ca3c1984";
    }

    location /HQgOV1DbaM.txt {
                default_type    text/html;
                return 200 "91aad82c4fadf3b6b4843771561dac64";
    }
    location /pay/gateway/ {
        proxy_pass  http://192.168.3.121:9226/pay/gateway/;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        client_max_body_size    200m;
    }


    location /pay/gateway/api/ {
        proxy_next_upstream http_502 http_504 error timeout invalid_header;
        proxy_set_header Host  $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.3.121:9216/api/;
        # 启用支持websocket连接
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location / {
        proxy_pass  http://prod_ss_sa-cc_svc:8080/;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    
    location ~ ^/(export-app|common|order|supplier|contract|base) {
            proxy_pass  http://api.zhongdao;
    }
}



## 前端http强制转https
server {
    listen       8080;

    server_name     www.sinoassist.com;
    add_header Strict-Transport-Security max-age=15768000;
    return 301 https://www.sinoassist.com$request_uri;

}