a327a262dd
核心变更： - 完全移除 ops-web 容器（私有化部署无需运营后台） - nginx sub_filter 替换前端 JS bundle 中的公网 SDK URL - deploy.sh 写入正确的 SDK_IM_WS_URL / SDK_IM_API_URL / SDK_FILE_SERVICE_URL - 新增 scripts/update.sh：热更新脚本，修复配置 + 可选拉镜像 + 重启 + 验证 - 新增 upgrade.sh：一键升级入口，curl 下载后直接执行，流程同 install.sh - install.sh 检测已有部署（.env 存在），自动路由到 update.sh 而非重跑向导 - 关键配置文件（.env / secrets.env / xuqm.env）在 tarball 解压前备份后恢复 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
100 行
3.2 KiB
Plaintext
100 行
3.2 KiB
Plaintext
server {
|
||
listen 80;
|
||
server_name _;
|
||
|
||
charset utf-8;
|
||
client_max_body_size 100m;
|
||
|
||
# 健康检查（宿主机 nginx 探活用）
|
||
location /health {
|
||
return 200 "ok\n";
|
||
add_header Content-Type text/plain;
|
||
}
|
||
|
||
# 版本管理 — 必须在通用 /api/ 之前
|
||
location /api/v1/updates/ {
|
||
proxy_pass http://update-service:8084/api/v1/updates/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_read_timeout 60s;
|
||
}
|
||
|
||
location /api/v1/rn/ {
|
||
proxy_pass http://update-service:8084/api/v1/rn/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_read_timeout 120s;
|
||
}
|
||
|
||
# IM HTTP — 必须在通用 /api/ 之前
|
||
location /api/im/ {
|
||
proxy_pass http://im-service:8082/api/im/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_read_timeout 60s;
|
||
}
|
||
|
||
# IM WebSocket
|
||
location /ws/im {
|
||
proxy_pass http://im-service:8082/ws/im;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Upgrade $http_upgrade;
|
||
proxy_set_header Connection "upgrade";
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_read_timeout 3600s;
|
||
}
|
||
|
||
# License — 必须在通用 /api/ 之前
|
||
location /api/license/ {
|
||
proxy_pass http://license-service:8085/api/license/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_read_timeout 60s;
|
||
}
|
||
|
||
# 文件上传下载
|
||
location /file/ {
|
||
proxy_pass http://file-service:8086/file/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
client_max_body_size 500m;
|
||
proxy_read_timeout 300s;
|
||
proxy_send_timeout 300s;
|
||
}
|
||
|
||
# 核心 API（兜底，在所有具体 /api/xxx/ 之后）
|
||
location /api/ {
|
||
proxy_pass http://tenant-service:9001/api/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_read_timeout 60s;
|
||
}
|
||
|
||
location /actuator/ {
|
||
proxy_pass http://tenant-service:9001/actuator/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
}
|
||
|
||
# 控制台前端（兜底路由，必须最后）
|
||
# sub_filter 替换前端 JS bundle 中硬编码的公有平台地址为私有部署地址
|
||
location / {
|
||
proxy_pass http://tenant-web:80;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header Accept-Encoding "";
|
||
sub_filter 'wss://im.dev.xuqinmin.com/ws/im' 'wss://$host/ws/im';
|
||
sub_filter 'https://im.dev.xuqinmin.com' 'https://$host';
|
||
sub_filter 'https://dev.xuqinmin.com' 'https://$host';
|
||
sub_filter_once off;
|
||
sub_filter_types text/html text/javascript application/javascript;
|
||
}
|
||
}
|
