Update nginx.conf

nginx.conf

@@ -45,7 +45,6 @@ http {
             proxy_set_header Host             $host;
             proxy_set_header X-Real-IP        $remote_addr;
             proxy_set_header X-Scheme         $scheme;
-            # nginx auth_request includes headers but not body
             proxy_set_header Content-Length   "";
             proxy_pass_request_body           off;
         }
@@ -54,12 +53,11 @@ http {
         # Protected Resources
         # =========================================================
 
-        # 1. Terminal (ttyd) - Root Path
+        # 1. Terminal (ttyd) - Root Path /
         location / {
             auth_request /oauth2/auth;
             error_page 401 = /oauth2/sign_in;
 
-            # If authenticated, pass to ttyd
             proxy_pass http://127.0.0.1:7681;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
@@ -68,23 +66,35 @@ http {
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        # 2. OpenClaw Dashboard - /ui/ Path
+        # 注意：OpenClaw 可能期望运行在根路径。如果它不支持子路径部署，
+        # 我们可能需要调整，或者通过重写 URL 来适配。
+        # 这里我们尝试将其映射到 /ui/ 并去除前缀。
+        location /ui/ {
+            auth_request /oauth2/auth;
+            error_page 401 = /oauth2/sign_in;
 
-            # Pass user info from oauth2-proxy (optional)
-            auth_request_set $user   $upstream_http_x_auth_request_user;
-            auth_request_set $email  $upstream_http_x_auth_request_email;
-            proxy_set_header X-User  $user;
-            proxy_set_header X-Email $email;
+            # 这里的斜杠很重要，它会把 /ui/foo 转发为 /foo
+            proxy_pass http://127.0.0.1:18789/;
+            
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        # 2. Game (WASM) - /game Path
+        # 3. WASM Game - /game Path (保留以备不时之需)
         location /game {
             auth_request /oauth2/auth;
             error_page 401 = /oauth2/sign_in;
 
             alias /var/www/html/game;
             index index.html;
-            
-            # WASM specific headers
             add_header Cross-Origin-Opener-Policy same-origin;
             add_header Cross-Origin-Embedder-Policy require-corp;
         }