upstream cj_server_android {
    server 172.16.0.44:9503;
}
upstream cj_ws_android {
    server 172.16.0.44:9601;
}

server {
    listen 80;
    client_max_body_size 5M;
    # 如果要开启443，请先生成你的服务器证书，若双向认证，请导入证书到你的电脑里
    listen 443 ssl;
    ssl_certificate      /etc/nginx/ssl/cj163.xyz/fullchain.cer;
    ssl_certificate_key  /etc/nginx/ssl/cj163.xyz/cj163.xyz.key;
    ssl_verify_client off;
    ssl_prefer_server_ciphers on;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;

    server_name ali1-api.cj163.xyz;

    access_log  /var/log/nginx/ali1-api.cj163.xyz.access.log;
    error_log   /var/log/nginx/ali1-api.cj163.xyz.error.log;


    location /ws {
        proxy_pass http://cj_ws_android;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        rewrite /ws/(.*) /$1 break;
        proxy_redirect off;
    }

    location / {
	    proxy_set_header Host  $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;
	    proxy_set_header REMOTE_ADD $remote_addr;
	    proxy_set_header Upgrade $http_upgrade;
        proxy_pass http://cj_server_android; #后端api容器地址
        proxy_redirect  off;
    }
}