fu-hsi-service/docker/fu-hsi-nginx/docs/conf.d/https.conf

server {
    listen 443 ssl;
    server_name example.com;

    ssl_certificate /data/fu-hsi/nginx/ssl/cert.pem;
    ssl_certificate_key /data/fu-hsi/nginx/ssl/key.pem;

    # 配置SSL参数
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384;

    # 配置SSL会话缓存
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 30m;

    # 配置SSL安全性选项
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 5s;
    
	client_max_body_size 20M;  # 设置客户端请求的最大上传大小为 20MB，可以根据实际情况修改
	
	location / {
	root   /usr/share/nginx/html/dist;
	index  index.html index.htm;
       # add_header 	Cache-Control no-store;
    }

	error_page   500 502 503 504  /50x.html;
    location =  /50x.html {
        root   /usr/share/nginx/html/dist;
    }

    location /fu-hsi-server/ {
        proxy_pass http://fu_hsi_servers/fu-hsi-server/;
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
    }

    location /fuHsiApi/ {
        proxy_pass http://fu_hsi_servers/fu-hsi-server/;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}