cleanengine-reverseproxy/nginx.conf at main · CleanEngine/cleanengine-reverseproxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    # 캐시 설정
    proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=STATIC_CACHE:10m max_size=1g inactive=60m use_temp_path=off;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    gzip  on;
    gzip_vary on;
    # 압축률 설정
    gzip_comp_level 6;
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript
               font/ttf font/opentype font/woff font/woff2 application/vnd.ms-fontobject application/x-font-ttf;

    upstream react_app{
      server 10.0.0.4:3000;
    }

    upstream api-server{
      server 10.0.0.138:8080;
    }

    upstream ai-server{
      server 10.0.0.12:8000;
    }

    server {
      listen 80;
      listen [::]:80;
      server_name investfuture.my;

      return 301 https://$host$request_uri;
    }

    server{
      listen 443 ssl;
      listen [::]:443 ssl;

      # HTTP/3
      listen 443 quic reuseport;
      listen [::]:443 quic reuseport;


      http3 on;
      http2 on;

      add_header Alt-Svc 'h3=":443"; ma=86400';
      add_header X-protocol $server_protocol always;

      server_name investfuture.my;

      ssl_certificate     /etc/nginx/certs/fullchain.pem;
      ssl_certificate_key /etc/nginx/certs/privkey.pem;

      ssl_protocols       TLSv1.2 TLSv1.3;
      ssl_ciphers         HIGH:!aNULL:!MD5;

      location /{
        proxy_pass http://react_app/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # HTTP/3
      }

      location /static/ {
        proxy_pass http://react_app/;
      }

      location /api/{
        proxy_pass http://api-server/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
      }

      location /ai/ {
        proxy_pass http://ai-server/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
      }

      location /api/coin/min {
        proxy_pass http://api-server/api/coin/min;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_read_timeout 86400s;
        proxy_send_timeout 86400s;
      }

      location ~* \.(js|css|png|jpg|jpeg|webp|gif|svg|ico|woff|woff2|ttf)$ {
        proxy_pass http://react_app;  # 리액트 앱으로부터 정적 파일 제공
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;

        # 서버 측 캐싱 설정
        proxy_cache STATIC_CACHE;
        proxy_cache_valid 200 302 60m;
        proxy_cache_valid 404 1m;
        proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
        proxy_cache_revalidate on;
        proxy_cache_min_uses 1;
        proxy_cache_lock on;

        expires 60m;
        add_header Cache-Control "public, immutable, no-transform, max-age=3600";
        add_header X-Cache $upstream_cache_status;
      }
    }
}