gaoxiaopei
/
nginx-proxy-ai
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: 统一所有站点使用 Let's Encrypt 证书，修复 SSL 不安全提示 

- www-ai/root-domain/assets/issue/git 从 oa.tlyq.ai（CloudFlare Origin 自签名）
  改为 www.tlyq.ai（Let's Encrypt 公共信任证书）
- oa.tlyq.ai 的 CloudFlare Origin 证书仅用于 oa-ai.conf
This commit is contained in:
gitadmin 2026-07-09 16:01:49 +08:00
parent 35190b493e
commit cc43c75dda
5 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
conf.d/assets-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name assets.tlyq.ai; server_name assets.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location /_next/static/ { location /_next/static/ {
proxy_pass http://assets-ai:3000; proxy_pass http://assets-ai:3000;

4
conf.d/git-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name git.tlyq.ai; server_name git.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
# Gitea 通过 OIDC 认证，不走 auth_request，只需基本反向代理 # Gitea 通过 OIDC 认证，不走 auth_request，只需基本反向代理
location / { location / {

4
conf.d/issue-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name issue.tlyq.ai; server_name issue.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location /_next/static/ { location /_next/static/ {
proxy_pass http://issue-ai:3000; proxy_pass http://issue-ai:3000;

4
conf.d/root-domain.conf
View File

@ -5,8 +5,8 @@ server {
server_name tlyq.ai; server_name tlyq.ai;
# 共用现有证书 # 共用现有证书
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
return 301 https://www.tlyq.ai$request_uri; return 301 https://www.tlyq.ai$request_uri;
} }

4
conf.d/www-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name www.tlyq.ai; server_name www.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location /_next/static/ { location /_next/static/ {
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;