user  root;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;
    sendfile        on;
    #tcp_nopush     on;
    #keepalive_timeout  0;
    keepalive_timeout  65;
    underscores_in_headers on;
    client_max_body_size 1024M;
    gzip  on;
    send_timeout  60;
    server_tokens off;
    server{
       listen 443 ssl;  # 1.1版本后这样写
       server_name sanfengyulin.cbsd-pro.com; #填写绑定证书的域名
       ssl_certificate     /opt/cloud_ca/sanfengyulin.cbsd-pro.com.pem;  # 指定证书的位置，绝对路径
       ssl_certificate_key /opt/cloud_ca/sanfengyulin.cbsd-pro.com.key;  # 绝对路径，同上
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
       ssl_prefer_server_ciphers on;
       add_header Referrer-Policy  "no-referrer" always; ##解决不同源跨域问题
       add_header X-Frame-Options SAMEORIGIN;
       add_header X-Permitted-Cross-Domain-Policies 'none';
        add_header X-Download-Options "noopen";
        location / {
           root  /opt/nodeweb/dist/;
           index  index.html index.htm;
       }
       location /universaltestsoftware_client_api {
           proxy_pass http://sanfengyulinapi:8585/universaltestsoftware_client_api/;
       }  
    }
    server {
        listen       80;
        server_name  sanfengyulin.cbsd-pro.com;
        client_max_body_size 200m;
        add_header Content-Security-Policy "default-src * data: 'unsafe-inline'  'unsafe-eval';";
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Content-Type-Options nosniff;
        add_header Referrer-Policy  "no-referrer" always; ##解决不同源跨域问题
        add_header X-Frame-Options SAMEORIGIN;
        add_header X-Permitted-Cross-Domain-Policies 'none';
        add_header X-Download-Options "noopen";

        location / {
            root  /opt/nodeweb/dist/;
            index  index.html index.htm;
        }
        location /universaltestsoftware_client_api {
             proxy_pass http://sanfengyulinapi:8585/universaltestsoftware_client_api/;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        # error_page   500 502 503 504  /50x.html;
        error_page  404 403 500 502 503 504  /404.html;
        location = /50x.html {
            root   html;
        }

    }
}