74 lines
3.1 KiB
Plaintext
74 lines
3.1 KiB
Plaintext
# ═══════════════════════════════════════════════════════════
|
||
# 国内域名 · ICP备案落地页 Nginx 配置 (阿里云临时服务器)
|
||
# ═══════════════════════════════════════════════════════════
|
||
#
|
||
# 编号: ALI-NGX-CN-LANDING
|
||
# 服务器: ALI-SVR · 8.155.62.235 · 阿里云
|
||
# 守护: 铸渊 · ICE-GL-ZY001
|
||
# 版权: 国作登字-2026-A-00037559
|
||
#
|
||
# 架构:
|
||
# guanghulab.com / www.guanghulab.com → 国内用户首页
|
||
# 前端: /opt/guanghulab-landing/sites/cn-landing/ (静态HTML)
|
||
# 用途: ICP备案合规展示 · 域名备案迁移期间临时使用
|
||
#
|
||
# ⚠️ 注意:
|
||
# - 此文件是唯一的Nginx站点配置，default_server确保优先级
|
||
# - 所有文件隔离在 /opt/guanghulab-landing/ 目录下
|
||
# - 部署workflow会自动禁用所有冲突配置（包括旧站点、certbot残留）
|
||
# - SSL配置由部署workflow根据证书存在情况自动注入
|
||
#
|
||
# 域名变量由部署工作流注入:
|
||
# ALI_CN_DOMAIN_PLACEHOLDER → guanghulab.com
|
||
#
|
||
# SSL占位符由部署工作流根据证书状态注入:
|
||
# __SSL_BLOCK_PLACEHOLDER__ → SSL listen + 证书配置（有证书时）
|
||
# __HTTP_REDIRECT_BLOCK_PLACEHOLDER__ → HTTP→HTTPS重定向server块（有证书时）
|
||
# ═══════════════════════════════════════════════════════════
|
||
|
||
__HTTP_REDIRECT_BLOCK_PLACEHOLDER__
|
||
|
||
server {
|
||
listen 80 default_server;
|
||
listen [::]:80 default_server;
|
||
__SSL_BLOCK_PLACEHOLDER__
|
||
server_name ALI_CN_DOMAIN_PLACEHOLDER www.ALI_CN_DOMAIN_PLACEHOLDER;
|
||
|
||
# ─── 安全头 ───
|
||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||
add_header X-Content-Type-Options "nosniff" always;
|
||
add_header X-XSS-Protection "1; mode=block" always;
|
||
add_header X-Server-Identity "ALI-SVR-CN-LANDING" always;
|
||
add_header X-Site-Mode "cn-landing-ali" always;
|
||
|
||
# ─── 静态文件根目录 · 国内落地页 ───
|
||
root /opt/guanghulab-landing/sites/cn-landing;
|
||
index index.html;
|
||
|
||
# ─── 前端静态文件 ───
|
||
location / {
|
||
try_files $uri $uri/ /index.html;
|
||
}
|
||
|
||
# ─── 健康探针 ───
|
||
location = /health {
|
||
access_log off;
|
||
return 200 '{"status":"ok","server":"ali-cn","role":"cn-landing","domain":"ALI_CN_DOMAIN_PLACEHOLDER"}';
|
||
add_header Content-Type application/json;
|
||
}
|
||
|
||
# ─── 静态资源缓存 ───
|
||
location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
|
||
expires 7d;
|
||
add_header Cache-Control "public, immutable";
|
||
}
|
||
|
||
# ─── 错误页面 ───
|
||
error_page 404 /index.html;
|
||
error_page 500 502 503 504 /index.html;
|
||
|
||
# ─── 访问日志 (隔离目录) ───
|
||
access_log /opt/guanghulab-landing/logs/nginx-access.log;
|
||
error_log /opt/guanghulab-landing/logs/nginx-error.log;
|
||
}
|