1
upstream dashboard {
2
    keepalive 512;
3
    server 127.0.0.1:8008;
4
}

1
location ^~ / {
2
    proxy_pass http://127.0.0.1:8008;
3
    proxy_set_header Host $host;
4
    proxy_set_header X-Real-IP $remote_addr;
5
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
6
    proxy_set_header REMOTE-HOST $remote_addr;
7
    proxy_set_header Upgrade $http_upgrade;
8
    proxy_set_header nz-realip $http_cf_connecting_ip;
9
    proxy_set_header Connection "upgrade";
10
    proxy_set_header X-Forwarded-Proto $scheme;
11
    proxy_http_version 1.1;
12
    proxy_read_timeout 3600s;
13
    proxy_send_timeout 3600s;
14
    proxy_buffer_size 128k;
15
    proxy_buffers 4 128k;
16
    proxy_busy_buffers_size 256k;
17
    proxy_max_temp_file_size 0;
18
    add_header X-Cache $upstream_cache_status;
19
    add_header Cache-Control no-cache;
20
    proxy_ssl_server_name off;
21
    proxy_ssl_name $proxy_host;
22
    add_header Strict-Transport-Security "max-age=31536000";
23
}
24

25
underscores_in_headers on;
26
set_real_ip_from 0.0.0.0/0; # CDN 回源 IP 地址段
27
real_ip_header CF-Connecting-IP; # CDN 私有 header，此处为 CloudFlare 默认
28

29
# gRPC 服务
30
location ^~ /proto.NezhaService/ {
31
    grpc_set_header Host $host;
32
    grpc_set_header nz-realip $http_CF_Connecting_IP;
33
    grpc_read_timeout 600s;
34
    grpc_send_timeout 600s;
35
    grpc_socket_keepalive on;
36
    client_max_body_size 10m;
37
    grpc_buffer_size 4m;
38
    grpc_pass grpc://dashboard;
39
}
40

41
# WebSocket 服务
42
location ~* ^/api/v1/ws/(server|terminal|file)(.*)$ {
43
    proxy_set_header Host $host;
44
    proxy_set_header nz-realip $http_cf_connecting_ip;
45
    proxy_set_header Origin https://$host;
46
    proxy_set_header Upgrade $http_upgrade;
47
    proxy_set_header Connection "upgrade";
48
    proxy_read_timeout 3600s;
49
    proxy_send_timeout 3600s;
50
    proxy_pass http://127.0.0.1:8008;
51
}