# 宁夏智慧养殖监管平台 - 前端服务配置 server { listen 80; server_name localhost; root /usr/share/nginx/html; index index.html index.htm; # 字符编码 charset utf-8; # 访问日志 access_log /var/log/nginx/access.log main; # 静态资源缓存配置 location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ { expires 1y; add_header Cache-Control "public, immutable"; add_header Vary Accept-Encoding; access_log off; } # 处理Vue Router的history模式 location / { try_files $uri $uri/ /index.html; add_header Cache-Control "no-cache, no-store, must-revalidate"; add_header Pragma "no-cache"; add_header Expires "0"; } # API代理到后端服务 location /api/ { # 后端服务地址(在docker-compose中定义) proxy_pass http://backend:5350; # 代理头设置 proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # 超时设置 proxy_connect_timeout 10s; proxy_send_timeout 10s; proxy_read_timeout 10s; # 缓冲设置 proxy_buffering on; proxy_buffer_size 4k; proxy_buffers 8 4k; # WebSocket支持 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } # WebSocket专用代理 location /socket.io/ { proxy_pass http://backend:5350; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # WebSocket特定超时 proxy_read_timeout 86400; } # 百度地图API代理(解决跨域问题) location /map-api/ { proxy_pass https://api.map.baidu.com/; proxy_set_header Host api.map.baidu.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_ssl_server_name on; # 添加CORS头 add_header Access-Control-Allow-Origin *; add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range'; } # 健康检查端点 location /health { access_log off; return 200 "healthy\n"; add_header Content-Type text/plain; } # 安全配置 location ~ /\. { deny all; access_log off; log_not_found off; } # 防止访问敏感文件 location ~* \.(env|log|sql)$ { deny all; access_log off; log_not_found off; } # 错误页面 error_page 404 /404.html; error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } }