24 lines
1.0 KiB
Smarty
24 lines
1.0 KiB
Smarty
server {
|
|
listen 80;
|
|
client_max_body_size {{NGINX_CLIENT_MAX_BODY_SIZE}};
|
|
# 地址为占位默认值(127.0.0.11=Docker 内嵌 DNS);容器 entrypoint 启动时会按
|
|
# /etc/resolv.conf 的首个 nameserver 重写本行,兼容 podman aardvark-dns。
|
|
resolver 127.0.0.11 valid=10s;
|
|
|
|
# spec §7 风险接受所假设的 CSP:全部同源,blob:/data: 供 SW/reader 用
|
|
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob: data:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; connect-src 'self' blob: data:; object-src 'none'; frame-src 'self' blob:" always;
|
|
|
|
location /api/ {
|
|
set $api_upstream http://api:8080; # 变量式 → 每次按 DNS 解析,scale 后轮询到新副本(spec §11)
|
|
proxy_pass $api_upstream; # 无 URI 部分:保留 /api 前缀转发
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
}
|
|
|
|
location / {
|
|
root /usr/share/nginx/html;
|
|
try_files $uri /index.html;
|
|
}
|
|
}
|