gaoxiaopei
/
nginx-proxy-ai
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: gaoxiaopei:main
Branches Tags
gaoxiaopei:main
gaoxiaopei:v2026.06.03
gaoxiaopei:v2026.05.14
gaoxiaopei:0.0.1
..
compare: gaoxiaopei:0.0.1
Branches Tags
gaoxiaopei:main
gaoxiaopei:v2026.06.03
gaoxiaopei:v2026.05.14
gaoxiaopei:0.0.1

No commits in common. "main" and "0.0.1" have entirely different histories.
main ... 0.0.1

9 changed files with 19 additions and 57 deletions
Show Stats Expand all files Collapse all files

4
.gitignore vendored
View File

@ -1,6 +1,2 @@
.DS_Store .DS_Store
.claude/ .claude/
nginx-local.conf
docker-compose.local.yml
certs/
conf.d.sso-backup/

7
conf.d/assets-ai.conf
View File

@ -2,13 +2,14 @@ server {
listen 443 ssl; listen 443 ssl;
server_name assets.tlyq.ai; server_name assets.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location / { location / {
proxy_pass http://assets-ai:3000; proxy_pass http://assets-ai:3000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
} }
} }

4
conf.d/cloud-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name cloud.tlyq.ai; server_name cloud.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location / { location / {
proxy_pass http://cloud-ai; proxy_pass http://cloud-ai;

10
conf.d/git-ai.conf
View File

@ -2,20 +2,14 @@ server {
listen 443 ssl; listen 443 ssl;
server_name git.tlyq.ai; server_name git.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
# Gitea 通过 OIDC 认证，不走 auth_request，只需基本反向代理
location / { location / {
proxy_pass http://gitea-ai:3000; proxy_pass http://gitea-ai:3000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
client_max_body_size 0;
proxy_request_buffering off;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
} }
} }

7
conf.d/issue-ai.conf
View File

@ -2,13 +2,14 @@ server {
listen 443 ssl; listen 443 ssl;
server_name issue.tlyq.ai; server_name issue.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location / { location / {
proxy_pass http://issue-ai:3000; proxy_pass http://issue-ai:3000;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
} }
} }

28
conf.d/oa-ai.conf
View File

@ -1,28 +0,0 @@
server {
listen 443 ssl;
server_name oa.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location /_next/static/ {
resolver 127.0.0.11 valid=30s;
set $upstream oa-ai:3000;
proxy_pass http://$upstream;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto https;
expires 1y;
add_header Cache-Control "public, immutable";
}
location / {
resolver 127.0.0.11 valid=30s;
set $upstream oa-ai:3000;
proxy_pass http://$upstream;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto https;
add_header Cache-Control "no-cache, no-store, must-revalidate";
}
}

4
conf.d/root-domain.conf
View File

@ -5,8 +5,8 @@ server {
server_name tlyq.ai; server_name tlyq.ai;
# 共用现有证书 # 共用现有证书
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
return 301 https://www.tlyq.ai$request_uri; return 301 https://www.tlyq.ai$request_uri;
} }

4
conf.d/token-ai.conf
View File

@ -2,8 +2,8 @@ server {
listen 443 ssl; listen 443 ssl;
server_name token.tlyq.ai; server_name token.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location / { location / {
proxy_pass http://token-ai; proxy_pass http://token-ai;

8
conf.d/www-ai.conf
View File

@ -2,13 +2,11 @@ server {
listen 443 ssl; listen 443 ssl;
server_name www.tlyq.ai; server_name www.tlyq.ai;
ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem;
location / { location / {
resolver 127.0.0.11 valid=30s; proxy_pass http://www-ai;
set $upstream www-ai;
proxy_pass http://$upstream;
proxy_set_header Host $host; proxy_set_header Host $host;
} }
} }