resolver 127.0.0.11 valid=10s ipv6=off; map $http_upgrade $connection_upgrade { default upgrade; '' close; } upstream app { zone app_backend 64k; server devcontainer:8000 resolve; } upstream spectator { zone app_backend 64k; server devcontainer:8086 resolve; } server { listen 80; server_name _; client_max_body_size 50m; # 屏蔽 /_lio/ 及其所有子路径的外部访问 location ~ ^/_lio/ { return 403; } # Spectator Server SignalR Hub location /signalr/ { proxy_pass http://spectator/; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Authorization $http_authorization; proxy_read_timeout 86400s; proxy_send_timeout 86400s; proxy_connect_timeout 60s; proxy_cache_bypass $http_upgrade; proxy_buffering off; } # Health check for spectator server location /health { proxy_pass http://spectator/health; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } # FastAPI application location / { proxy_pass http://app; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 86400s; proxy_send_timeout 86400s; proxy_connect_timeout 60s; proxy_cache_bypass $http_upgrade; proxy_buffering off; } }