From e250159a9e6441c0474d5599d4197f4f9d847839 Mon Sep 17 00:00:00 2001
From: yubo <autumnal_wind@yeah.net>
Date: 星期一, 06 四月 2026 22:53:05 +0800
Subject: [PATCH] feat(user): 添加员工档案详情弹窗视图及信息展示功能

---
 nginx.conf |  120 ++++++++++++++++++++++++++++++++++-------------------------
 1 files changed, 69 insertions(+), 51 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index bb37410..ca94e62 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -1,65 +1,83 @@
-worker_processes  auto;
-
-error_log   /var/log/nginx/error.log;
-pid   /run/nginx.pid;
+worker_processes 1;
 
 events {
-    worker_connections  1024;
+    worker_connections 1024;
 }
 
 http {
-        include mime.types;
-        default_type  application/octet-stream;
+    include mime.types;
+    default_type application/octet-stream;
+    sendfile on;
+    keepalive_timeout 65;
 
-        server_names_hash_bucket_size 512;
-        client_header_buffer_size 32k;
-        large_client_header_buffers 4 32k;
-        client_max_body_size 50m;
-
-        sendfile   on;
-        tcp_nopush on;
-
-        keepalive_timeout 60;
-        tcp_nodelay on;
-
-        fastcgi_connect_timeout 300;
-        fastcgi_send_timeout 300;
-        fastcgi_read_timeout 300;
-        fastcgi_buffer_size 64k;
-        fastcgi_buffers 4 64k;
-        fastcgi_busy_buffers_size 128k;
-        fastcgi_temp_file_write_size 256k;
-        fastcgi_intercept_errors on;
-
-        gzip on;
-        gzip_min_length  1k;
-        gzip_buffers     16 8k;
-        gzip_http_version 1.1;
-        gzip_comp_level 6;
-        gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml;
-        gzip_vary on;
-        gzip_proxied   expired no-cache no-store private auth;
-        gzip_disable   "MSIE [1-6]\.";
-
-        limit_conn_zone $binary_remote_addr zone=perip:10m;
-        limit_conn_zone $server_name zone=perserver:10m;
-
-        server_tokens off;
-        access_log off;
-
-
+    # 当后端连接数达到上限时,新请求将进入队列等待
+    proxy_connect_timeout 5s;
+    # 限制每个后端 Worker 的队列长度
+    limit_conn_zone $server_name zone=conn_zone:10m;
+    limit_conn conn_zone 10;
+	
+    # ========== 你的域名配置(直接写在 http 内部)==========
+    
+    # HTTP 重定向
     server {
-        listen       80;
-        server_name  localhost;
+        listen 80;
+        server_name zbyt.esunsail.com;
+        return 301 https://$server_name$request_uri;
+    }
+
+    # HTTPS 配置
+    server {
+        listen 443 ssl;
+		http2 on;
+        server_name zbyt.esunsail.com;
+
+        ssl_certificate     C:/inetpub/win-acme/certs/zbyt.esunsail.com/zbyt.esunsail.com.pem;
+        ssl_certificate_key C:/inetpub/win-acme/certs/zbyt.esunsail.com/zbyt.esunsail.com.key;
+
+        ssl_protocols TLSv1.2 TLSv1.3;
+       # ssl_ciphers HIGH:!aNULL:!MD5;
+	    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:...'; # 使用较新的套件
+        ssl_prefer_server_ciphers on;
+        ssl_session_cache   shared:SSL:10m; # 10M共享内存,可存储约8万个会话
+        ssl_session_timeout 10m;
+		ssl_session_tickets on;
 
         charset utf-8;
+        access_log logs/zbyt.esunsail.com.access.log;
+        error_log logs/zbyt.esunsail.com.error.log;
 
         location / {
-            root   html;
-            index  index.html index.htm;
+            proxy_pass http://127.0.0.1:8000;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_connect_timeout 60s;
+            proxy_send_timeout 60s;
+            proxy_read_timeout 60s;
         }
-        location = /50x.html {
-            root   html;
+
+        location /api/ {
+            proxy_pass http://127.0.0.1:8301/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_connect_timeout 30s;
+            proxy_send_timeout 30s;
+            proxy_read_timeout 30s;
+            proxy_no_cache 1;
+            proxy_cache_bypass 1;
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            
+            # 允许上传最大100MB的文件
+            client_max_body_size 100m;
+        }
+
+        location /health {
+            access_log off;
+            return 200 "OK\n";
+            add_header Content-Type text/plain;
         }
     }
-}
+}
\ No newline at end of file

--
Gitblit v1.8.0