server { listen 80; listen 7009; listen 443 ssl; server_name airport-prod-software.t-aaron.com airport.t-aaron.com; root /data/tuoheng_airport_web/dist; # SSL证书配置 ssl_certificate /etc/nginx/t-aaron.com.pem; ssl_certificate_key /etc/nginx/t-aaron.com.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; # 开启gzip功能 gzip on; gzip_min_length 10k; gzip_comp_level 9; gzip_types text/plain text/css application/javascript application/x-javascript text/javascript application/xml; gzip_vary on; gzip_disable "MSIE [1-6]\."; location /{ try_files $uri $uri/ @router; index index.html; } location @router{ rewrite ^.*$ /index.html last; } location /airport { proxy_pass http://gatewayService/airport; proxy_set_header Host $host; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /permission { proxy_pass http://tuoheng_airport/permission; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } }