docs(ops): 统一 md.tkmind.cn 域名与 105→103 反代拓扑

将管理后台公网域名从 gadm 更正为 md.tkmind.cn，补充 105 nginx 反代 103 的部署说明，默认 VITE_BASE_PATH=/ 以支持 /analytics/seo-geo 根路径访问。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-10 17:38:31 +08:00
parent 6a7d6cec70
commit 0da7f04878
13 changed files with 98 additions and 73 deletions
@@ -0,0 +1,90 @@
+# md.tkmind.cn @ 105 nginx → Studio 103（58.38.22.103）
+# memind_adm 进程在 103；105 仅做 HTTPS 入口与反代，不跑 adm 应用。
+#   preview :5174  /  Admin API :8085
+#
+# 内网可达时 upstream 可改为 10.10.0.2；105 当前活动配置使用公网 IP 58.38.22.103。
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name md.tkmind.cn;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name md.tkmind.cn;
+    ssl_certificate     /etc/letsencrypt/live/md.tkmind.cn/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/md.tkmind.cn/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    location ^~ /ops/admin {
+        return 301 /;
+    }
+
+    # 旧 VITE_BASE_PATH=/ops 下的 admin 深链 → 根路径
+    location = /ops/analytics/seo-geo {
+        return 301 /analytics/seo-geo;
+    }
+
+    location /auth {
+        proxy_pass http://58.38.22.103:8085;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 120;
+        proxy_send_timeout 120;
+        proxy_buffering off;
+    }
+
+    location /admin-api {
+        proxy_pass http://58.38.22.103:8085;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 120;
+        proxy_send_timeout 120;
+        proxy_buffering off;
+    }
+
+    location /api {
+        proxy_pass http://58.38.22.103:8085;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 120;
+        proxy_send_timeout 120;
+        proxy_buffering off;
+    }
+
+    location / {
+        proxy_pass http://58.38.22.103:5174;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 120;
+        proxy_send_timeout 120;
+        proxy_buffering off;
+    }
+}