Edit acme

configuration/nginx/acme.md

@@ -22,7 +22,7 @@ $ acme.sh --set-default-ca --server letsencrypt
 ```
 server {
     listen          80;
-    server_name     duanju2.api.styujia.com;
+    server_name     ai.api.daoguyujia.com api.daogu.ai;
     
     location ^~ /.well-known/acme-challenge/ {
         root /home/webroot;
@@ -36,8 +36,8 @@ $ mkdir -p /home/webroot/.well-known/acme-challenge
 
 4.生成证书
 ```
-$ acme.sh --issue -d duanju2.manage.styujia.com -w /home/YujiaDuanjuAdmin/dist/
-$ acme.sh --issue -d duanju2.api.styujia.com -w /home/webroot/
+$ acme.sh --issue -d ai.manage.daoguyujia.com -d manage.daogu.ai -w /home/BackendFront/dist/
+$ acme.sh --issue -d ai.api.daoguyujia.com -d api.daogu.ai -w /home/webroot/
 ```
 
 5.设置自动更新

configuration/nginx/conf.d/ai.api.conf

@@ -5,7 +5,7 @@ upstream myapi {
 
 server {
     listen          80;
-    server_name     ai.api.daoguyujia.com;
+    server_name     ai.api.daoguyujia.com api.daogu.ai;
     client_max_body_size 500M;
 
     location ^~ /.well-known/acme-challenge/ {
@@ -33,9 +33,8 @@ server {
         proxy_pass http://myapi/api/sse/;
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_read_timeout 10s;
-        proxy_send_timeout 10s;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
         proxy_buffering off;
         proxy_cache off;
         proxy_set_header Connection "";
@@ -45,7 +44,7 @@ server {
 
 server {
     listen       443 ssl;
-    server_name  ai.api.daoguyujia.com;
+    server_name  ai.api.daoguyujia.com api.daogu.ai;
 
     ssl_certificate      /root/.acme.sh/ai.api.daoguyujia.com/fullchain.cer;
     ssl_certificate_key  /root/.acme.sh/ai.api.daoguyujia.com/ai.api.daoguyujia.com.key;
@@ -74,12 +73,11 @@ server {
         proxy_pass http://myapi/api/sse/;
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_read_timeout 10s;
-        proxy_send_timeout 10s;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
         proxy_buffering off;
         proxy_cache off;
         proxy_set_header Connection "";
     }
 
-}
+}

configuration/nginx/conf.d/ai.manage.conf

@@ -5,7 +5,7 @@ upstream myapp {
 
 server {
     listen          80;
-    server_name     ai.manage.daoguyujia.com;
+    server_name     ai.manage.daoguyujia.com manage.daogu.ai;
     client_max_body_size 500M;
 
     location / {
@@ -20,6 +20,9 @@ server {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
+
+    # 强制跳转到 HTTPS
+    return 301 https://$host$request_uri;
 }
 
 server {
@@ -28,7 +31,7 @@ server {
 
     location / {
         index         index.html;
-        root          /home/FrontendSys/dist;
+        root          /home/BackendFront/dist;
         # Vue 路由设置
         try_files $uri $uri/ /index.html;
         # 允许跨域
@@ -52,9 +55,8 @@ server {
         proxy_pass http://myapp/api/sse/;
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_read_timeout 10s;
-        proxy_send_timeout 10s;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
         proxy_buffering off;
         proxy_cache off;
         proxy_set_header Connection "";
@@ -64,7 +66,7 @@ server {
 
 server {
     listen       443 ssl;
-    server_name  ai.manage.daoguyujia.com;
+    server_name  ai.manage.daoguyujia.com manage.daogu.ai;
 
     ssl_certificate      /root/.acme.sh/ai.manage.daoguyujia.com/fullchain.cer;
     ssl_certificate_key  /root/.acme.sh/ai.manage.daoguyujia.com/ai.manage.daoguyujia.com.key;
@@ -75,14 +77,14 @@ server {
 
     location / {
         index  index.html;
-        root /home/FrontendSys/dist;
+        root /home/BackendFront/dist;
         # Vue 路由设置
         try_files $uri $uri/ /index.html;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header Host $http_host;
-        proxy_set_header X-NginX-Proxy true;
-        proxy_redirect off;
+        # 允许跨域
+        add_header  Access-Control-Allow-Headers *;
+        add_header Access-Control-Allow-Origin $http_origin always;
+        add_header  Access-Control-Allow-Methods 'GET,POST,OPTIONS';
+        add_header  Access-Control-Allow-Credentials 'true';
     }
 
     # 接口代理配置 (Vue项目代理)
@@ -99,12 +101,11 @@ server {
         proxy_pass http://myapp/api/sse/;
         proxy_http_version 1.1;
         proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_read_timeout 10s;
-        proxy_send_timeout 10s;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
         proxy_buffering off;
         proxy_cache off;
         proxy_set_header Connection "";
     }
 
- }
+ }