|
|
server {
|
|
|
listen 443 ssl;
|
|
|
server_name example.com;
|
|
|
|
|
|
ssl_certificate /data/vp/nginx/ssl/cert.pem;
|
|
|
ssl_certificate_key /data/vp/nginx/ssl/key.pem;
|
|
|
|
|
|
# 配置SSL参数
|
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384;
|
|
|
|
|
|
# 配置SSL会话缓存
|
|
|
ssl_session_cache shared:SSL:10m;
|
|
|
ssl_session_timeout 30m;
|
|
|
|
|
|
# 配置SSL安全性选项
|
|
|
ssl_stapling on;
|
|
|
ssl_stapling_verify on;
|
|
|
resolver 8.8.8.8 8.8.4.4 valid=300s;
|
|
|
resolver_timeout 5s;
|
|
|
|
|
|
client_max_body_size 20M; # 设置客户端请求的最大上传大小为 20MB，可以根据实际情况修改
|
|
|
|
|
|
location / {
|
|
|
root /usr/share/nginx/html/dist;
|
|
|
index index.html index.htm;
|
|
|
# add_header Cache-Control no-store;
|
|
|
}
|
|
|
|
|
|
error_page 500 502 503 504 /50x.html;
|
|
|
location = /50x.html {
|
|
|
root /usr/share/nginx/html/dist;
|
|
|
}
|
|
|
|
|
|
# 前台后端服务
|
|
|
location /virtual-patient/ {
|
|
|
proxy_pass http://web_servers/virtual-patient/;
|
|
|
proxy_set_header Host $http_host;
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
}
|
|
|
|
|
|
# 前台文件服务代理到后管
|
|
|
location /virtual-patient/fileManage/ {
|
|
|
proxy_pass http://manage_servers/virtual-patient-manage/fileManage/;
|
|
|
proxy_set_header Host $http_host;
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
}
|
|
|
|
|
|
# 后管后端服务
|
|
|
location /virtual-patient-manage/ {
|
|
|
proxy_pass http://manage_servers/virtual-patient-manage/;
|
|
|
proxy_set_header Host $http_host;
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
}
|
|
|
|
|
|
# rasa 服务
|
|
|
location /virtual-patient-rasa/ {
|
|
|
proxy_pass http://rasa_servers/virtual-patient-rasa/;
|
|
|
proxy_set_header Host $http_host;
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
}
|
|
|
|
|
|
# 知识图谱服务
|
|
|
location /virtual-patient-graph/ {
|
|
|
proxy_pass http://graph_servers/virtual-patient-graph/;
|
|
|
proxy_set_header Host $http_host;
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
}
|
|
|
|
|
|
} |