john
0da7f04878
将管理后台公网域名从 gadm 更正为 md.tkmind.cn，补充 105 nginx 反代 103 的部署说明， 默认 VITE_BASE_PATH=/ 以支持 /analytics/seo-geo 根路径访问。 Co-authored-by: Cursor <cursoragent@cursor.com>
91 lines
2.8 KiB
Plaintext
91 lines
2.8 KiB
Plaintext
# md.tkmind.cn @ 105 nginx → Studio 103（58.38.22.103）
|
||
# memind_adm 进程在 103；105 仅做 HTTPS 入口与反代，不跑 adm 应用。
|
||
# preview :5174 / Admin API :8085
|
||
#
|
||
# 内网可达时 upstream 可改为 10.10.0.2；105 当前活动配置使用公网 IP 58.38.22.103。
|
||
|
||
server {
|
||
listen 80;
|
||
listen [::]:80;
|
||
server_name md.tkmind.cn;
|
||
|
||
location /.well-known/acme-challenge/ {
|
||
root /var/www/certbot;
|
||
}
|
||
|
||
location / {
|
||
return 301 https://$host$request_uri;
|
||
}
|
||
}
|
||
|
||
server {
|
||
listen 443 ssl http2;
|
||
listen [::]:443 ssl http2;
|
||
server_name md.tkmind.cn;
|
||
ssl_certificate /etc/letsencrypt/live/md.tkmind.cn/fullchain.pem;
|
||
ssl_certificate_key /etc/letsencrypt/live/md.tkmind.cn/privkey.pem;
|
||
include /etc/letsencrypt/options-ssl-nginx.conf;
|
||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
|
||
|
||
location ^~ /ops/admin {
|
||
return 301 /;
|
||
}
|
||
|
||
# 旧 VITE_BASE_PATH=/ops 下的 admin 深链 → 根路径
|
||
location = /ops/analytics/seo-geo {
|
||
return 301 /analytics/seo-geo;
|
||
}
|
||
|
||
location /auth {
|
||
proxy_pass http://58.38.22.103:8085;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Forwarded-Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_read_timeout 120;
|
||
proxy_send_timeout 120;
|
||
proxy_buffering off;
|
||
}
|
||
|
||
location /admin-api {
|
||
proxy_pass http://58.38.22.103:8085;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Forwarded-Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_read_timeout 120;
|
||
proxy_send_timeout 120;
|
||
proxy_buffering off;
|
||
}
|
||
|
||
location /api {
|
||
proxy_pass http://58.38.22.103:8085;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Forwarded-Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_read_timeout 120;
|
||
proxy_send_timeout 120;
|
||
proxy_buffering off;
|
||
}
|
||
|
||
location / {
|
||
proxy_pass http://58.38.22.103:5174;
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Forwarded-Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_read_timeout 120;
|
||
proxy_send_timeout 120;
|
||
proxy_buffering off;
|
||
}
|
||
}
|