user nginx;
worker_processes auto;

error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include /etc/nginx/mime.types;

    default_type application/octet-stream;

    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
    '$status $body_bytes_sent "$http_referer" '
    '"$http_user_agent" "$http_x_forwarded_for"';

    access_log /var/log/nginx/access.log main;


    client_max_body_size 30m;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    server_tokens off;
    types_hash_max_size 2048;
    keepalive_timeout 65;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
    }

    upstream gateway {
        server 192.168.0.23:8888 ;
    }

    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    #gzip_http_version 1.0;
    gzip_comp_level 8;
    gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_proxied any;
    gzip_vary off;
    gzip_disable "MSIE [1-6]\.";

    server {
        listen 443 ssl;
        server_name test.chaos.com;

        ssl_certificate /etc/nginx/cert/test.chaos.com_bundle.crt;
        ssl_certificate_key /etc/nginx/cert/test.chaos.com.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        location /api/ {
            proxy_pass http://gateway/;
            proxy_set_header Host $host:8888;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Via "nginx";
        }
		
		location /nacos {
            port_in_redirect on;
            proxy_pass http://127.0.0.1:8848;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /rocketmq/ {
            port_in_redirect on;
            proxy_pass http://127.0.0.1:9870/;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location / {
            root /home/nginx/www/face/;
        }

        location /favicon.ico {
            root /usr/share/nginx/html/;
        }

    }
 


}