worker_processes 1;

events {
worker_connections 1024;
}

http {
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;

server {
    listen       80;
    server_name  localhost;
    charset utf-8;

    location / {
        root   /home/navicate/dist;
        try_files $uri $uri/ /index.html;
        index  index.html index.htm;
    }
    
    location /prod-api/ {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://localhost:8080/;
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
}
server {
 #SSL 默认访问端口号为 443
 listen 443 ssl; 
 #请填写绑定证书的域名
 server_name  xxxx.xxx; 
 #请填写证书文件的相对路径或绝对路径
 ssl_certificate /home/ssl/glad.ink_bundle.crt; 
 #请填写私钥文件的相对路径或绝对路径
 ssl_certificate_key /home/ssl/glad.ink.key; 
 ssl_session_timeout 5m;
 #请按照以下协议配置
 ssl_protocols TLSv1.2 TLSv1.3; 
 #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; 
 ssl_prefer_server_ciphers on;
 location / {
     #网站主页路径。此路径仅供参考，具体请您按照实际目录操作。
     #例如，您的网站主页在 Nginx 服务器的 /etc/www 目录下，则请修改 root 后面的 html 为 /etc/www。
     root /home/navicate/dist; 
    try_files $uri $uri/ /index.html;
     index  index.html index.htm;
 }
# 默认所有路径
    location /prod-api/ {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE_HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header X-Forwarded-Proto $scheme;
                    proxy_set_header X-NginX-Proxy true;

        # 反向代理配置
        proxy_pass http://localhost:8080/;
    }

}

}