upstream chuji_server_admin {
    server 137.220.142.147:9503;
}
upstream cj_ws_admin {
    server 137.220.142.147:9601;
}

server {
    listen 80;
    client_max_body_size 5M;
    # 如果要开启443，请先生成你的服务器证书，若双向认证，请导入证书到你的电脑里
    listen 443 ssl;
    ssl_certificate      /etc/nginx/ssl/cj163.xyz/fullchain.cer;
    ssl_certificate_key  /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
    ssl_verify_client off;
    ssl_prefer_server_ciphers on;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;

    server_name mg379s.cj163.xyz;

    access_log  /var/log/nginx/mg379s.cj163.xyz.access.log;
    error_log   /var/log/nginx/mg379s.cj163.xyz.error.log;

    # 跨域
    set $cors_credentials '';
    set $cors_content_type '';
    set $cors_content_length '';
    if ($http_origin ~ '.+') {
        set $cors_credentials 'true';
    }
    if ($request_method = OPTIONS) {
        set $cors_content_type 'text/plain';
        set $cors_content_length '0';
    }
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials $cors_credentials always;
    add_header Access-Control-Allow-Methods $http_access_control_request_method always;
    add_header Access-Control-Allow-Headers $http_access_control_request_headers always;
    add_header Content-Type $cors_content_type;
    add_header Content-Length $cors_content_length;
    if ($request_method = OPTIONS) {
        return 204;
    }

    location /ws {
        proxy_pass http://cj_ws_admin;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        rewrite /ws/(.*) /$1 break;
        proxy_redirect off;
    }

    location / {
	    proxy_set_header Host  $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	    proxy_set_header REMOTE_ADD $remote_addr;
	    proxy_set_header Upgrade $http_upgrade;
        proxy_pass http://chuji_server_admin; #后端api容器地址
        proxy_redirect  off;
    }
}