55 lines
1.5 KiB
Plaintext
55 lines
1.5 KiB
Plaintext
# 开发者子域名沙箱 · 自动匹配
|
||
# 指令：ZY-AGEOS-TOWER-2026-0326-001
|
||
# 版权：国作登字-2026-A-00037559
|
||
#
|
||
# 需要冰朔配置：
|
||
# 1. DNS: *.guanghulab.com → A → 8.155.62.235
|
||
# 2. SSL: certbot certonly --dns 模式获取通配符证书 *.guanghulab.com
|
||
|
||
# HTTP → HTTPS 重定向
|
||
server {
|
||
listen 80;
|
||
server_name ~^(?<devid>dev-\d{3})\.guanghulab\.com$;
|
||
return 301 https://$host$request_uri;
|
||
}
|
||
|
||
# HTTPS 子域名沙箱
|
||
server {
|
||
listen 443 ssl;
|
||
server_name ~^(?<devid>dev-\d{3})\.guanghulab\.com$;
|
||
|
||
# SSL 证书（通配符证书 *.guanghulab.com）
|
||
ssl_certificate /etc/letsencrypt/live/guanghulab.com/fullchain.pem;
|
||
ssl_certificate_key /etc/letsencrypt/live/guanghulab.com/privkey.pem;
|
||
|
||
# 每个开发者的沙箱目录
|
||
root /var/www/sandbox/$devid;
|
||
index index.html;
|
||
|
||
location / {
|
||
try_files $uri $uri/ /index.html;
|
||
}
|
||
|
||
# 安全头
|
||
add_header X-Frame-Options SAMEORIGIN;
|
||
add_header X-Content-Type-Options nosniff;
|
||
add_header X-Sandbox-DevId $devid;
|
||
|
||
# 日志
|
||
access_log /var/log/nginx/sandbox-$devid-access.log;
|
||
error_log /var/log/nginx/sandbox-error.log;
|
||
}
|
||
|
||
# 行业子域名（后期启用）
|
||
# server {
|
||
# listen 443 ssl;
|
||
# server_name writing.guanghulab.com;
|
||
# ssl_certificate /etc/letsencrypt/live/guanghulab.com/fullchain.pem;
|
||
# ssl_certificate_key /etc/letsencrypt/live/guanghulab.com/privkey.pem;
|
||
# root /var/www/industry/writing;
|
||
# index index.html;
|
||
# location / {
|
||
# try_files $uri $uri/ /index.html;
|
||
# }
|
||
# }
|