deploy: 3113f4b — 更新 nginx.conf

frontend/nginx.conf

@@ -1,109 +1,96 @@
-user nginx;
 worker_processes auto;
 error_log /var/log/nginx/error.log warn;
 pid /var/run/nginx.pid;
 
 events {
-    worker_connections 4096;
-    # NOTE: removed "use epoll" — Linux-only, breaks on macOS Docker Desktop.
-    multi_accept on;
+worker_connections 4096;
+multi_accept on;
 }
 
 http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
-
-    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
-                    '$status $body_bytes_sent "$http_referer" '
-                    '"$http_user_agent" rt=$request_time';
-
-    access_log /var/log/nginx/access.log main;
+include       /etc/nginx/mime.types;
+default_type  application/octet-stream;
+
+```
+log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+                '$status $body_bytes_sent "$http_referer" '
+                '"$http_user_agent" rt=$request_time';
+
+access_log /var/log/nginx/access.log main;
+
+sendfile        on;
+tcp_nopush      on;
+tcp_nodelay     on;
+keepalive_timeout 65;
+gzip on;
+gzip_vary on;
+gzip_proxied any;
+gzip_comp_level 6;
+gzip_types text/plain text/css text/xml application/json application/javascript
+           application/xml+rss application/atom+xml image/svg+xml;
+
+limit_req_zone $binary_remote_addr zone=api:10m rate=100r/m;
+limit_req_zone $binary_remote_addr zone=v1:10m rate=200r/m;
+
+upstream backend {
+    server backend:3001;
+    keepalive 32;
+}
 
-    sendfile        on;
-    tcp_nopush      on;
-    tcp_nodelay     on;
-    keepalive_timeout 65;
-    gzip on;
-    gzip_vary on;
-    gzip_proxied any;
-    gzip_comp_level 6;
-    gzip_types text/plain text/css text/xml application/json application/javascript
-               application/xml+rss application/atom+xml image/svg+xml;
+upstream litellm {
+    server litellm:4000;
+    keepalive 64;
+}
 
-    # Rate limiting
-    limit_req_zone $binary_remote_addr zone=api:10m rate=100r/m;
-    limit_req_zone $binary_remote_addr zone=v1:10m rate=200r/m;
+upstream frontend {
+    server frontend:80;
+    keepalive 16;
+}
 
-    # Upstream definitions
-    upstream backend {
-        server backend:3001;
-        keepalive 32;
+server {
+    listen 80;
+    server_name _;
+
+    client_max_body_size 100M;
+    proxy_read_timeout 300s;
+    proxy_connect_timeout 10s;
+    proxy_send_timeout 300s;
+
+    location /v1/ {
+        limit_req zone=v1 burst=50 nodelay;
+        proxy_pass http://litellm;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
+        proxy_buffering off;
+        proxy_cache off;
+        chunked_transfer_encoding on;
+        proxy_read_timeout 300s;
     }
 
-    upstream litellm {
-        server litellm:4000;
-        keepalive 64;
+    location /api/ {
+        limit_req zone=api burst=20 nodelay;
+        proxy_pass http://backend;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection "";
     }
 
-    upstream frontend {
-        server frontend:80;
-        keepalive 16;
-    }
-
-    server {
-        listen 80;
-        server_name _;
-
-        client_max_body_size 100M;
-        proxy_read_timeout 300s;
-        proxy_connect_timeout 10s;
-        proxy_send_timeout 300s;
-
-        # ── OpenAI-compatible AI API endpoints (via LiteLLM) ──────────────
-        location /v1/ {
-            limit_req zone=v1 burst=50 nodelay;
-
-            proxy_pass http://litellm;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header Connection "";
-
-            # SSE / streaming support
-            proxy_buffering off;
-            proxy_cache off;
-            chunked_transfer_encoding on;
-            proxy_read_timeout 300s;
-        }
-
-        # ── Backend Management API ────────────────────────────────────────
-        location /api/ {
-            limit_req zone=api burst=20 nodelay;
-
-            proxy_pass http://backend;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header Connection "";
-        }
-
-        # ── Frontend SPA ──────────────────────────────────────────────────
-        # BUG FIX #12: Removed Upgrade / Connection "upgrade" headers.
-        # The frontend is a static React SPA served by nginx — it does not use
-        # WebSockets. Sending Upgrade headers to a plain HTTP upstream is
-        # incorrect. Connection "" clears the hop-by-hop header and enables
-        # HTTP/1.1 keepalive to the upstream frontend container.
-        location / {
-            proxy_pass http://frontend;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header Connection "";
-        }
+    location / {
+        proxy_pass http://frontend;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Connection "";
     }
 }
+```
+
+}