max пре 4 месеци
родитељ
комит
de9e9d8485
3 измењених фајлова са 211 додато и 79 уклоњено
  1. 120 0
      nginxConf/alaxypay_asia.conf
  2. 43 37
      nginxConf/nginxProd.conf
  3. 48 42
      nginxConf/nginxSandbox.conf

+ 120 - 0
nginxConf/alaxypay_asia.conf

@@ -0,0 +1,120 @@
+server
+{
+    listen 80;
+    listen 443 ssl;
+    server_name sandbox-va.galaxypay.asia;
+    index index.html index.htm default.htm default.html;
+    root /www/wwwroot/va/admin_test/dist;
+
+    #SSL-START SSL related configuration
+    #error_page 404/404.html;
+    ssl_certificate    /www/server/panel/vhost/cert/server/fullchain.pem;
+    ssl_certificate_key    /www/server/panel/vhost/cert/server/privkey.pem;
+    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
+    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:10m;
+    ssl_session_timeout 10m;
+    add_header Strict-Transport-Security "max-age=31536000";
+    error_page 497  https://$host$request_uri;
+    #SSL-END
+
+    #ERROR-PAGE-START  Error page related configuration
+    #error_page 404 /404.html;
+    #error_page 502 /502.html;
+    #ERROR-PAGE-END
+
+
+    #REWRITE-START Pseudo-static related configuration
+    include /www/server/panel/vhost/rewrite/node_server.conf;
+    #REWRITE-END
+
+    location / {
+      index  index.html index.htm;
+	    try_files $uri $uri/ @router;
+    }
+    location @router {
+        rewrite ^.*$ /index.html last;
+    }
+
+    #Files or directories forbidden to access
+    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md|package.json|package-lock.json|\.env|node_modules) {
+        return 404;
+    }
+
+    #One-click application for SSL certificate verification directory related settings
+    location /.well-known/ {
+        root  /www/wwwroot/va/server_test;
+    }
+
+    # HTTP reverse proxy related settings begin >>>
+    location ~ /purge(/.*) {
+        proxy_cache_purge cache_one $host$request_uri$is_args$args;
+    }
+
+    location /api/ {
+        proxy_pass http://127.0.0.1:8009/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header REMOTE-HOST $remote_addr;
+        add_header X-Cache $upstream_cache_status;
+
+        proxy_connect_timeout 30s;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 30s;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+    location /openApi/ {
+        proxy_pass http://127.0.0.1:8009/api/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header REMOTE-HOST $remote_addr;
+        add_header X-Cache $upstream_cache_status;
+
+        proxy_connect_timeout 30s;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 30s;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    location /open-api/ {
+        proxy_pass http://127.0.0.1:8009/api/open/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header REMOTE-HOST $remote_addr;
+        add_header X-Cache $upstream_cache_status;
+
+        proxy_connect_timeout 30s;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 30s;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+    location /api-doc/ {
+        proxy_pass http://127.0.0.1:8009/swagger-ui/index.html;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header REMOTE-HOST $remote_addr;
+        add_header X-Cache $upstream_cache_status;
+
+        proxy_connect_timeout 30s;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 30s;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+    # End of HTTP reverse proxy related settings <<<
+
+    access_log  /www/wwwlogs/galaxypay_asia_server.log;
+    error_log  /www/wwwlogs/galaxypay_asia_server.error.log;
+}

+ 43 - 37
nginxConf/nginxProd.conf

@@ -2,10 +2,14 @@ server
 {
     listen 80;
     listen 443 ssl;
-    server_name va.fusionpay.one;
+    server_name va.fusionpay.one va.fusionpay.global;
     index index.html index.htm default.htm default.html;
     root /www/wwwroot/va/admin/dist;
-
+    
+    #CERT-APPLY-CHECK--START
+    # Configuration related to file verification for SSL certificate application - Do not delete
+    include /www/server/panel/vhost/nginx/well-known/server.conf;
+    #CERT-APPLY-CHECK--END
     #SSL-START SSL related configuration
     #error_page 404/404.html;
     ssl_certificate    /www/server/panel/vhost/cert/server/fullchain.pem;
@@ -18,17 +22,17 @@ server
     add_header Strict-Transport-Security "max-age=31536000";
     error_page 497  https://$host$request_uri;
     #SSL-END
-
+    
     #ERROR-PAGE-START  Error page related configuration
     #error_page 404 /404.html;
     #error_page 502 /502.html;
     #ERROR-PAGE-END
-
-
+    
+    
     #REWRITE-START Pseudo-static related configuration
     include /www/server/panel/vhost/rewrite/node_server.conf;
     #REWRITE-END
-
+    
     location / {
       index  index.html index.htm;
 	    try_files $uri $uri/ @router;
@@ -36,12 +40,12 @@ server
     location @router {
         rewrite ^.*$ /index.html last;
     }
-
+    
     #Files or directories forbidden to access
     location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md|package.json|package-lock.json|\.env|node_modules) {
         return 404;
     }
-
+    
     #One-click application for SSL certificate verification directory related settings
     location /.well-known/ {
         root  /www/wwwroot/va/server;
@@ -67,37 +71,39 @@ server
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";
     }
+    
     location /openApi/ {
-        proxy_pass http://127.0.0.1:8008/api/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header REMOTE-HOST $remote_addr;
-        add_header X-Cache $upstream_cache_status;
+      proxy_pass http://127.0.0.1:8008/api/;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header REMOTE-HOST $remote_addr;
+      add_header X-Cache $upstream_cache_status;
 
-        proxy_connect_timeout 30s;
-        proxy_read_timeout 86400s;
-        proxy_send_timeout 30s;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
+      proxy_connect_timeout 30s;
+      proxy_read_timeout 86400s;
+      proxy_send_timeout 30s;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
     }
-        location /open-api/ {
-            proxy_pass http://127.0.0.1:8009/api/open/;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header REMOTE-HOST $remote_addr;
-            add_header X-Cache $upstream_cache_status;
-
-            proxy_connect_timeout 30s;
-            proxy_read_timeout 86400s;
-            proxy_send_timeout 30s;
-            proxy_http_version 1.1;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection "upgrade";
-        }
+    
+    location /open-api/ {
+      proxy_pass http://127.0.0.1:8008/api/open/;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header REMOTE-HOST $remote_addr;
+      add_header X-Cache $upstream_cache_status;
 
+      proxy_connect_timeout 30s;
+      proxy_read_timeout 86400s;
+      proxy_send_timeout 30s;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+    }
+        
         location /api-doc/ {
         proxy_pass http://127.0.0.1:8008/swagger-ui/index.html;
         proxy_set_header Host $host;
@@ -114,7 +120,7 @@ server
         proxy_set_header Connection "upgrade";
     }
     # End of HTTP reverse proxy related settings <<<
-
+    
     access_log  /www/wwwlogs/server.log;
     error_log  /www/wwwlogs/server.error.log;
-}
+}

+ 48 - 42
nginxConf/nginxSandbox.conf

@@ -2,10 +2,14 @@ server
 {
     listen 80;
     listen 443 ssl;
-    server_name sandbox-va.galaxypay.asia;
+    server_name sandbox-va.fusionpay.one sandbox-va.fusionpay.global;
     index index.html index.htm default.htm default.html;
-    root /www/wwwroot/va/admin_test/dist;
-
+    root /www/wwwroot/va/admin_sandbox/dist;
+    
+    #CERT-APPLY-CHECK--START
+    # Configuration related to file verification for SSL certificate application - Do not delete
+    include /www/server/panel/vhost/nginx/well-known/server.conf;
+    #CERT-APPLY-CHECK--END
     #SSL-START SSL related configuration
     #error_page 404/404.html;
     ssl_certificate    /www/server/panel/vhost/cert/server/fullchain.pem;
@@ -18,17 +22,17 @@ server
     add_header Strict-Transport-Security "max-age=31536000";
     error_page 497  https://$host$request_uri;
     #SSL-END
-
+    
     #ERROR-PAGE-START  Error page related configuration
     #error_page 404 /404.html;
     #error_page 502 /502.html;
     #ERROR-PAGE-END
-
-
+    
+    
     #REWRITE-START Pseudo-static related configuration
     include /www/server/panel/vhost/rewrite/node_server.conf;
     #REWRITE-END
-
+    
     location / {
       index  index.html index.htm;
 	    try_files $uri $uri/ @router;
@@ -36,15 +40,15 @@ server
     location @router {
         rewrite ^.*$ /index.html last;
     }
-
+    
     #Files or directories forbidden to access
     location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md|package.json|package-lock.json|\.env|node_modules) {
         return 404;
     }
-
+    
     #One-click application for SSL certificate verification directory related settings
     location /.well-known/ {
-        root  /www/wwwroot/va/server_test;
+        root  /www/wwwroot/va/server;
     }
 
     # HTTP reverse proxy related settings begin >>>
@@ -53,7 +57,7 @@ server
     }
 
     location /api/ {
-        proxy_pass http://127.0.0.1:8009/;
+        proxy_pass http://127.0.0.1:8010/;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -67,39 +71,41 @@ server
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";
     }
+    
     location /openApi/ {
-        proxy_pass http://127.0.0.1:8009/api/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header REMOTE-HOST $remote_addr;
-        add_header X-Cache $upstream_cache_status;
+      proxy_pass http://127.0.0.1:8010/api/;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header REMOTE-HOST $remote_addr;
+      add_header X-Cache $upstream_cache_status;
 
-        proxy_connect_timeout 30s;
-        proxy_read_timeout 86400s;
-        proxy_send_timeout 30s;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
+      proxy_connect_timeout 30s;
+      proxy_read_timeout 86400s;
+      proxy_send_timeout 30s;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
     }
-
+    
     location /open-api/ {
-        proxy_pass http://127.0.0.1:8009/api/open/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header REMOTE-HOST $remote_addr;
-        add_header X-Cache $upstream_cache_status;
+      proxy_pass http://127.0.0.1:8010/api/open/;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header REMOTE-HOST $remote_addr;
+      add_header X-Cache $upstream_cache_status;
 
-        proxy_connect_timeout 30s;
-        proxy_read_timeout 86400s;
-        proxy_send_timeout 30s;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
+      proxy_connect_timeout 30s;
+      proxy_read_timeout 86400s;
+      proxy_send_timeout 30s;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
     }
-    location /api-doc/ {
-        proxy_pass http://127.0.0.1:8009/swagger-ui/index.html;
+        
+        location /api-doc/ {
+        proxy_pass http://127.0.0.1:8010/swagger-ui/index.html;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -114,7 +120,7 @@ server
         proxy_set_header Connection "upgrade";
     }
     # End of HTTP reverse proxy related settings <<<
-
-    access_log  /www/wwwlogs/server.log;
-    error_log  /www/wwwlogs/server.error.log;
-}
+    
+    access_log  /www/wwwlogs/sandbox_va_server.log;
+    error_log  /www/wwwlogs/sandbox_va_server.error.log;
+}