sa-charts/docker-swarm/nginx-prod-50/nginx_prod_config_v1

#### 中道prod环境开始  ####

upstream api.zhongdao {
    server ss52_sa-gateway_svc:8080;
    server ss53_sa-gateway_svc:8080;
}

# 中道外部接口
server {
    listen       8080;
    server_name  api.sinoassist.net api.sinoassist.com xcx-api.sinoassist.com interface.review.sino-assist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;


    location / {
        proxy_pass  http://api.zhongdao;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location ~ .*actuator.* {
        deny all;
    }
}


# 接口
server {
    listen       8080;
    server_name  api-nj.do-dec.com api-cd.do-dec.com api-wh.do-dec.com api-hz.do-dec.com api-sh.do-dec.com;

    location / {
        proxy_pass  http://api.zhongdao;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location ~ .*actuator.* {
        deny all;
    }
}


server {
    server_name site.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;


    location / {   
            root   /zd/cc-site/dist/;
            index  index.html index.htm;
            try_files $uri $uri/ /index.html;
            if ($request_filename ~ .*\.(htm|html)$)
            {
                add_header Cache-Control no-cache;
            }
    }
}


server {
    server_name www.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;

    location /h5/rescue {
        alias   /zd/rescue-h5/dist/;
        try_files  $uri $uri/ /h5/rescue/index.html;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }

    location /dev/h5/rescue {
        proxy_pass  http://192.168.1.209:8030/dev/h5/rescue;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        client_max_body_size    200m;
    }

    location /h5/client/ {
        alias   /zd/sino-client-h5/dist/build/h5/;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }



    location /h5/supplier/dispatch {
        alias   /zd/supplier-dispatch-h5/dist/;
        try_files  $uri $uri/  /h5/supplier/dispatch/index.html;
        index index.html;
        if ($request_filename ~ .*\.(htm|html)$)
            {
                    add_header Cache-Control no-cache;
            }
    }


    # 太科app 海豚湾 微信验证配置

    location /FowqINu4W1.txt {
                default_type    text/html;
                return 200 "90d7811c9e948fe95df1fd46ca3c1984";
    }

    location /HQgOV1DbaM.txt {
                default_type    text/html;
                return 200 "91aad82c4fadf3b6b4843771561dac64";
    }
    location /pay/gateway/ {
        proxy_pass  http://192.168.3.121:9226/pay/gateway/;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        client_max_body_size    200m;
    }


    location /pay/gateway/api/ {
        proxy_next_upstream http_502 http_504 error timeout invalid_header;
        proxy_set_header Host  $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.3.121:9216/api/;
        # 启用支持websocket连接
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location / {
        proxy_pass  http://prod_ss_sa-cc_svc:8080/;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    
    location ~ ^/(export-app|common|order|supplier|contract|base) {
            proxy_pass  http://api.zhongdao;
    }
}



## 前端http强制转https
server {
    listen       8080;

    server_name     www.sinoassist.com;
    add_header Strict-Transport-Security max-age=15768000;
    return 301 https://www.sinoassist.com$request_uri;

}

#### 中道prod环境结束  ####

## 公司其他域名的切换

# 4s店微信
server {
    listen       8080;
    server_name  wx4s.sinoassist.com;

    location / {
        proxy_pass  http://192.168.10.7:8777;
    }
}


# 微信供应商
server {
    listen       8080;
    server_name  wxdd.sinoassist.com;

    location / {
        proxy_pass  http://192.168.10.7:8568;
    }
}

# 呼叫中心接口
server {
    listen       8080;
    server_name  apicc.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;

    location / {
        proxy_pass  http://192.168.5.201:8080;
    }
}

# 呼叫中心接口websocket
server {
    listen       8080;
    server_name  apiccws.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;

    location / {
        proxy_pass  http://192.168.5.201:1884;
    }
}


## 救援生产环境其他服务域名切换


## rabbitmq stomp
upstream stomp.zhongdao {
    server prod_rabbitmq_queue1:15674;
    server prod_rabbitmq_queue2:15674;
    server prod_rabbitmq_stats:15674;
}

server {
    listen       8080;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;
    server_name  stomp.sinoassist.com;

    location / {
        proxy_pass http://stomp.zhongdao;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_http_version 1.1;
        proxy_set_header        Host            $host;
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}


# 备份文件服务器
server {
    listen       8080;
    server_name  file.sinoassist.com;
    include    /opt/bitnami/nginx/conf/ssl.sinoassist.conf;

    # 录音文件服务器
    location /ly/ {
        proxy_pass  http://192.168.5.204:8088/;

        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        if ($request_filename ~ .*\.(htm|html)$)
        {
            add_header Cache-Control no-cache;
        }

    }

    # 备份文件服务器
    location / {
        proxy_pass  http://192.168.10.18:8888;

        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-For
        $proxy_add_x_forwarded_for;
        if ($request_filename ~ .*\.(htm|html)$)
        {
            add_header Cache-Control no-cache;
        }

    }
}